last executing test programs: 40m32.445787436s ago: executing program 4 (id=2045): socket$inet_udplite(0x2, 0x2, 0x88) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 40m31.457699314s ago: executing program 4 (id=2049): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 40m27.403492993s ago: executing program 4 (id=2061): socket$alg(0x26, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000200000007"], 0x1082c0) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x10, 0x2c, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x787b}}}}}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x21c0, 0xc) r7 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, 0x0) ppoll(&(0x7f00000001c0)=[{r7, 0x40}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) 40m25.821877962s ago: executing program 4 (id=2064): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x8) fcntl$setlease(r0, 0x400, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24060400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x101011, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000020000000000000000000020095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 40m22.55573853s ago: executing program 4 (id=2073): socket$inet6(0xa, 0x800000000000002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x800000000000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r4, 0x29, 0x38, 0x0, &(0x7f00000002c0)=0xff31) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 40m22.227660527s ago: executing program 4 (id=2076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd", 0x29}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) 40m22.058409307s ago: executing program 32 (id=2076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd", 0x29}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) 35m35.500365597s ago: executing program 5 (id=2690): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x4e20, @private=0xa010101}}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_80211_inject_frame(0x0, 0x0, 0x10e) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) syz_io_uring_setup(0x19d1, 0xfffffffffffffffc, 0x0, 0x0) fsopen(&(0x7f0000000480)='adfs\x00', 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0xc) openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x513482, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0xb1e8, 0x1, {0xffffffffffffffff, 0x3, 0x80000000}}) ppoll(&(0x7f0000000180)=[{r2, 0x200}], 0x1, &(0x7f00000001c0), &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) 35m32.636141692s ago: executing program 5 (id=2696): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000002fc0)='1', 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x4c40, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) getrlimit(0x4, &(0x7f0000000240)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x82100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$6lowpan_control(r1, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 35m30.935995864s ago: executing program 5 (id=2698): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3589], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[], 0xfffffe2b}}, 0x2604c004) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES8=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f0000000280), 0x5, 0x0) process_mrelease(0xffffffffffffffff, 0x0) setuid(0x0) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000701, 0x0, &(0x7f0000000440)) io_uring_setup(0x7bda, &(0x7f0000001040)={0x0, 0x6cdf, 0x800, 0x2, 0x5}) 35m29.653580416s ago: executing program 5 (id=2701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 35m27.677625536s ago: executing program 5 (id=2705): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0xfffffffffffffffc}, {0xb6, 0x0, 0x0, 0x400000000000}, 0x4, 0x6e6bb1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2b}, 0x0, @in=@empty, 0x3506}}, 0xe8) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000005700), 0x40000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000380)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r7) keyctl$search(0xa, r7, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000580)) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="4daf", 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x17, 0x68, 0xa898cf170ab9f9b9, 0x1, 0x0, {0xa, 0x0, 0x4}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) 35m25.730896237s ago: executing program 5 (id=2710): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c000004"], 0x2c}}, 0x0) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35m10.211191119s ago: executing program 33 (id=2710): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c000004"], 0x2c}}, 0x0) epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m29.633981141s ago: executing program 1 (id=11069): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x100800}, 0x10) modify_ldt$read(0x0, &(0x7f0000001240)=""/251, 0xfb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}], 0x1c) 2m29.492022763s ago: executing program 1 (id=11074): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x3, @pix={0x80000000, 0x0, 0x34324152, 0x3, 0x0, 0x0, 0x4, 0x6, 0x0, 0x7, 0x0, 0x4}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001100)=[{&(0x7f00000033c0)=""/4094, 0xffe}], 0x1, 0x34, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sliced={0x0, [0x10, 0x6, 0x0, 0x1, 0x84f, 0x100, 0x8ea4, 0x8, 0x4, 0xff, 0x4e2, 0x3, 0xe4, 0x7, 0x2, 0xf, 0xfff7, 0x122c, 0x8, 0x7f, 0x81, 0x0, 0xfff7, 0x1, 0x2, 0x9, 0x9, 0xb, 0xeed, 0x7, 0xe90, 0x1, 0x38, 0x9, 0x96, 0x5, 0x81, 0x1, 0x9, 0x1b1, 0xd84, 0xd, 0x0, 0x86, 0x810a, 0x90, 0x146f, 0x8001], 0x8}}) 2m29.307125769s ago: executing program 1 (id=11075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r2, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r4, 0x0, 0xfffffe3e) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0xffffffff}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xdc, 0x0, 0x1, 0x8000, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000005d24c3a58769a7b184", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d6163767461700018fe028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) 2m28.044277962s ago: executing program 1 (id=11085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) clock_getres(0xfffffffffffffff1, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fd00000000000000030c0000400001800d0001007576703a73"], 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) getsockname$packet(r2, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8001, 0x9, &(0x7f0000006680)) io_setup(0x1400, &(0x7f0000000040)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x21, r2, 0x2}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) eventfd2(0x4, 0x800) eventfd(0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 2m27.152063291s ago: executing program 1 (id=11089): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) sendto$packet(r0, &(0x7f00000000c0)="fa9a8a27320ee2a0a4071a67bc26e2e4ba6f5b32d09d095ea12c2a12bd6b65caea0b0fabeb638dd6b0c584be475ee090408aa43bfda11cec547214175bcc9c141bd3d58b1959602dc446226a2e7d3d42deac470f89eb76e66ccfe616ecd54abed906f01c56638970a326920e5fa828a71d4578c07e86f2c5583ad704104687193963538c579e5f886825d67fe87753a6ad077273d15529d95fd8daae015127b02aac306191a55422b18eeac855d8a86599b7bf6983b41ba66269c387568ebbf5fd05598800f49b620d371f6a9855ecb41522106c71ab6a4cf47fe5c99d9298", 0xdf, 0x20000010, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) 2m26.917420372s ago: executing program 1 (id=11092): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume_offset', 0x4201, 0x24) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) 2m11.822673002s ago: executing program 34 (id=11092): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume_offset', 0x4201, 0x24) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) 11.058470712s ago: executing program 7 (id=11669): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = dup(0xffffffffffffffff) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1, r4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000200)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) 10.086680689s ago: executing program 7 (id=11674): ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)=0x2) r0 = epoll_create1(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r1, 0x0, 0x3c32) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x9d32f4b220c65367}) 9.824049812s ago: executing program 3 (id=11678): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x2f0, 0x30, 0x1, 0x0, 0x0, {}, [{0x2dc, 0x1, [@m_connmark={0x138, 0x7, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x9, 0x6, 0xfc47}, 0x2}}]}, {0xeb, 0x6, "c476f5a1303e4e0291002667d78cbae181737514aa8059eec346d3ccfc4465658197080dea844bf1edb2f8f98e24477ebe0b81097582709b1fb9c28b70b34f54b26315039d5c45ff68addc1e30ba8082f87b713ef5881dc3e579c00a4790171155dedac6c4e9281cd7d3daae803a7b5b2594b57418587177c846d54f7592beb8ca4188b393065fe5f6e1046d23bd32eb07a9517f40542a97b2f38bf08062132ef39f5c9061bdf1111eb178efd9e180f6e4dc45f6c552b090e9439fad48d910d926c81f564b129713f4e82c65e311ca40b55ac5734892cf127f8a8bdea6610d262aade972f703a5"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x1a0, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x15a, 0x6, "8dd4d5a2980cc40500000000000010bf57ba4abcedb875f62e319a0238f699d989478ddf36f312bffa67d7b913d6fc9048dbe54c236a444ee207b83c787885c191276aab7c6cc42de7f332335d1de3d741b2d0e483d0012720a4b11fa45268ad87c4ef628f5bbc0895187fc0acf60ba1863fef2358e8aa53fa86e95fc8659b1d3ee76ba7a26b25c0664075dd0c48f012e2b607539b43b092475c83ce0e092fdf934857b6f7daf84c60994b97a5a8f0dc319daebc6b443f971d63b6898dcdcbd0a9dc8e74a41e3f54a3daf169ef9860d3b9b2bd7503e481dcf7d632a5c2dbf601b50c96b5c95c614adbd3b16902a5c28edf18c6868eb85278864a6cfa667e41fc68bbd8a1210ff83ff128b83b4b5de3f503c0177441a3550d902ae523fe82580331cc463ea0d603f6a20b41a27a01181cafaaf1e47e50681991dca24d40d53592e7f80303aa529fd1928954f05a209ae2f8968454121b"}, {0xc}, {0xc}}}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r1) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) 9.240296439s ago: executing program 7 (id=11679): r0 = syz_io_uring_setup(0x124a, &(0x7f00000000c0)={0x0, 0x2170, 0x1, 0x3, 0x69}, 0x0, &(0x7f0000000280)=0x0) r2 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xb4}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x138, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@hbh={{0x48}, {0x3ff, 0x6, 0x0, [0x2, 0xf3, 0x1, 0x3, 0x3, 0x9, 0x50c4, 0xc95, 0x4, 0x0, 0xfffb, 0x2, 0x8, 0x10, 0x711e, 0x2], 0xa}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x5cfaff3, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000010c0)=@security={'security\x00', 0x64, 0x4, 0x558, 0x100000c, 0x0, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x7}}]}, @common=@SET={0x60}}, {{@ip={@empty, @private, 0x0, 0x0, 'wg2\x00', 'veth0\x00'}, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}, @common=@ah={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000006600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x400000000000165, 0x2, 0x0) gettid() socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x8, 0x92ad}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.410917844s ago: executing program 3 (id=11683): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="030000000400000004000000e0ffffff0000e737a6e1a10000", @ANYRES16, @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x10a4804, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30}, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4, 0x10000008, 0x6, 0x6, 0x3, r2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) creat(0x0, 0x90) r7 = getuid() r8 = getegid() openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmmsg$unix(r6, &(0x7f0000000740)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000400)="2f6ae7fe4aeec6b1064df5ae629733f4eec2a5bb4fe4ba36d8782f4d74d0ced18b0c7ca38bd5711465b92063c8e1ceb9c9b5921a97c42d6177226ba27550ba4fad7a3f9195ee4f84aafa53efc323aa32f84e15753473deea9d6ce93bc62b4939ade2e6fd15115ad16b99ffb00f912708a080ac", 0x73}, {&(0x7f0000000480)="6e04f288047315f58e2ded9d8e51004b3d4e15b90f167c4502b80bd70444b3c873b48820cf82ca0c766fbc519a5467a1d08958b5b03f52b3485d4cc946633a39aa5641d9f759989ba2adf83a62129b0aeae9bf2690e6abd27dc358ba8f7cdbd5aed5f6e8950c3b520d44abfe68c3f9cccde492180d10e8a6a35c97e67a51a93bd685f02e0e11cf3de6b637098338549db438f49e74ae72dfef5e3979170097fc6365c5a19cecba921b7dc37306", 0xad}], 0x2, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r2, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r3, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0xa0, 0x812}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000003f00)=[{{&(0x7f0000001900)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/154, 0x9a}], 0x1, &(0x7f00000020c0)=""/82, 0x52}, 0x8}, {{&(0x7f0000002140)=@caif=@dbg, 0x80, &(0x7f0000001c80)=[{&(0x7f00000021c0)=""/165, 0xa5}], 0x1, &(0x7f0000002280)=""/24, 0x18}, 0x800}, {{&(0x7f00000022c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002340)=""/203, 0xcb}, {&(0x7f0000002440)=""/40, 0x28}, {&(0x7f0000002480)=""/172, 0xac}], 0x3, &(0x7f0000002580)=""/202, 0xca}, 0xfc58}, {{&(0x7f0000002680)=@pptp, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002700)=""/114, 0x72}, {&(0x7f0000002780)=""/55, 0x37}, {&(0x7f00000027c0)=""/73, 0x49}, {&(0x7f0000002840)=""/195, 0xc3}, {&(0x7f00000039c0)=""/228, 0xe4}], 0x5, 0xfffffffffffffffe}, 0x4}, {{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003b40)=""/252, 0xfc}, {&(0x7f0000003c40)=""/108, 0x6c}, {&(0x7f0000003cc0)=""/8, 0x8}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/134, 0x86}, {&(0x7f0000003dc0)=""/173, 0xad}], 0x6}, 0x66a1}], 0x5, 0x2, 0x0) r9 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$inet(0x10, 0x1, 0x3) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000700000000000400010073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 7.795576328s ago: executing program 2 (id=11684): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) close(0x3) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 7.555001943s ago: executing program 0 (id=11685): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = dup(0xffffffffffffffff) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1, r4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000200)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) 6.893819958s ago: executing program 3 (id=11686): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0xa, 0x4) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) 6.651938206s ago: executing program 2 (id=11687): r0 = creat(0x0, 0x8) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000000280)={0x11, 0x7, 0x0, 0x1, 0xdf, 0x6, @local}, 0x14) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}]}, 0x40}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newnexthop={0x4c, 0x68, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xf013}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 6.650721124s ago: executing program 3 (id=11688): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40881) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = dup2(r2, r1) getpeername(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20048890) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/234, 0xea}, {&(0x7f0000000440)=""/154, 0x9a}], 0x2) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xb8) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000080)=""/65, 0x41}], 0x1, 0x80006, 0x4) bind$phonet(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) 5.926572021s ago: executing program 0 (id=11689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x800}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r1, 0x7, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000abc2f9ffffffffffffff479533ee987062393501963524e5723ab3e90380006cd77b7c2513f2bddbbf19836553963e4fa510f4d6a6ce4addaeb96c2cd3bb07d277a63fbbe81fd14d6ec188cbc1f9035cf751771117dc09daf3f01e74934c423b1fded90bdd6e3ef0be308df77eff2ad37eb5e0db24fbffffffffffffff06dca5062646020000000000000029dbbe14e006f897593e880c5e291071d869800c24b2c110", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x314c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000040e000800100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/129], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000d80)="bc14", 0x2}], 0x1, 0x0, 0x0, 0x4000010}, 0x20004011) recvmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5.266380743s ago: executing program 2 (id=11691): open_tree(0xffffffffffffff9c, 0x0, 0x80800) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000200)='\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x117) 4.91228481s ago: executing program 3 (id=11692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_getscheduler(r1) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da203002a000009050502000000000009058b"], 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0c0100000a0a01040000000000000000010000"], 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r2, 0xfff) r3 = accept(r2, 0xfffffffffffffffd, &(0x7f0000000680)=0x34000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f00000002c0), 0x100000001, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffffc, 0xe02, 0x0, 0x8, r5, 0xeaeb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0xb, @void, @value, @void, @value}, 0x50) truncate(&(0x7f0000000180)='./file0\x00', 0x8) 4.713489157s ago: executing program 2 (id=11693): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x20540, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) 4.380480537s ago: executing program 6 (id=11694): r0 = io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$mixer_OSS_GETVERSION(r2, 0x80086303, &(0x7f0000000000)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.263349184s ago: executing program 0 (id=11695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00X\x00', @ANYRES16=r4, @ANYBLOB="050027bd70000c0000002e00000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x2, r2}) 3.401682107s ago: executing program 2 (id=11696): r0 = io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xe) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$mixer_OSS_GETVERSION(r2, 0x80086303, &(0x7f0000000000)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.075455195s ago: executing program 0 (id=11697): mknod(0x0, 0x8000, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xc8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in6=@private1, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x3, 0x7, 0x7fff, 0x0, 0x2, 0xfffffffffffffffc}, {}, 0x0, 0x4, 0x1}, [@replay_val={0x10, 0xa, {0x70bd28, 0x70bd29, 0x7}}]}, 0xc8}}, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c461c02f9b7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300000000000000000000080038000100040004000d00030000000080000000000000010000000700000000000000080000000000000005000000000000000204"], 0x78) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000300)='#', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) socketpair(0x22, 0x3, 0x0, &(0x7f0000000780)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}]}]}, 0x28}}, 0x0) 3.070890126s ago: executing program 6 (id=11698): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x100, 0x43, 0xa0, 0x160, 0x98, 0x1f8, 0x178, 0x178, 0x1f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x5c}, 0x12a, 0xd8, 0x100, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@set={{0x40}, {{0x1, [0x4, 0x7, 0x0, 0x0, 0x2], 0x2}}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6, 0x4}, {0x0, 0x6, 0x7}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 'vxcan1\x00', 'bridge_slave_1\x00', {}, {}, 0x6, 0x1, 0x1c}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, 0x0) 2.770854818s ago: executing program 3 (id=11699): r0 = io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$mixer_OSS_GETVERSION(r2, 0x80086303, &(0x7f0000000000)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.312298171s ago: executing program 6 (id=11700): socket$nl_route(0x10, 0x3, 0x0) r0 = eventfd(0x800a6) r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x40002001}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008c00)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.028017078s ago: executing program 0 (id=11701): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) writev(r0, &(0x7f00000016c0)=[{&(0x7f00000006c0)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 1.926564474s ago: executing program 2 (id=11702): inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x5, 0x1300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x40000) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x3, 0x91, 0x0, 0x0, 0xfd, 0x3}) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x4000000, @remote, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) semctl$GETNCNT(0x0, 0x4, 0xe, 0x0) semget(0x3, 0x2, 0x10a) 1.909861788s ago: executing program 6 (id=11703): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xda3, 0xa91, 0xffffff7f, 0xfffffffa, 0x3}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x1, 0xb}, 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c0007090502", @ANYRES16], 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x4, 0x200002) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000040000000000000005000000fcffff0e0701000047070000"], 0x51b402) syz_usb_control_io(r2, 0x0, 0x0) times(&(0x7f00000001c0)) 1.369956126s ago: executing program 7 (id=11704): r0 = io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.184110572s ago: executing program 6 (id=11705): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xfb, "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"}, &(0x7f0000000280)=0x103) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r1, 0x601, 0x3}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x100}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='jbd2_submit_inode_data\x00', r2, 0x0, 0x5}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) io_uring_setup(0x398c, &(0x7f0000000180)={0x0, 0x2108, 0x0, 0x0, 0x200026c}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0400000000000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) wait4(0x0, 0x0, 0x40000000, 0x0) setresuid(0x0, 0xee01, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 466.562848ms ago: executing program 0 (id=11706): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x20) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 465.591603ms ago: executing program 7 (id=11707): pipe(&(0x7f0000000200)) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xb0a82) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r0 = socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000140)) bind$xdp(r0, &(0x7f00000001c0), 0x10) 208.326035ms ago: executing program 7 (id=11708): r0 = io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$mixer_OSS_GETVERSION(r2, 0x80086303, &(0x7f0000000000)) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=11709): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x2f0, 0x30, 0x1, 0x0, 0x0, {}, [{0x2dc, 0x1, [@m_connmark={0x138, 0x7, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x9, 0x6, 0xfc47}, 0x2}}]}, {0xeb, 0x6, "c476f5a1303e4e0291002667d78cbae181737514aa8059eec346d3ccfc4465658197080dea844bf1edb2f8f98e24477ebe0b81097582709b1fb9c28b70b34f54b26315039d5c45ff68addc1e30ba8082f87b713ef5881dc3e579c00a4790171155dedac6c4e9281cd7d3daae803a7b5b2594b57418587177c846d54f7592beb8ca4188b393065fe5f6e1046d23bd32eb07a9517f40542a97b2f38bf08062132ef39f5c9061bdf1111eb178efd9e180f6e4dc45f6c552b090e9439fad48d910d926c81f564b129713f4e82c65e311ca40b55ac5734892cf127f8a8bdea6610d262aade972f703a5"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x1a0, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x15a, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup(r1) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'hsr0\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) kernel console output (not intermixed with test programs): 6.801678][ T6339] Invalid source name [ 2846.805753][ T6339] UBIFS error (pid: 6339): cannot open "./file0", error -22 [ 2847.397575][ T6346] /dev/nullb0: Can't lookup blockdev [ 2848.164426][ T6364] /dev/nullb0: Can't lookup blockdev [ 2848.702256][ T6368] netlink: 'syz.1.9634': attribute type 4 has an invalid length. [ 2849.329981][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9635'. [ 2849.354563][ T6380] xt_cluster: node mask cannot exceed total number of nodes [ 2849.483315][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9637'. [ 2850.519072][ T6396] Invalid source name [ 2850.523152][ T6396] UBIFS error (pid: 6396): cannot open "./file0", error -22 [ 2851.103552][ T6411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2851.344781][ T6422] netlink: 'syz.2.9649': attribute type 4 has an invalid length. [ 2852.464078][ T6430] libceph: resolve '0.0' (ret=-3): failed [ 2852.564812][ T6443] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9657'. [ 2853.604837][ T6462] delete_channel: no stack [ 2853.650238][ T6460] delete_channel: no stack [ 2853.655339][ T30] audit: type=1400 audit(2000003601.461:2926): avc: denied { write } for pid=6460 comm="syz.2.9662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2853.747357][ T30] audit: type=1400 audit(2000003601.461:2927): avc: denied { ioctl } for pid=6460 comm="syz.2.9662" path="socket:[100796]" dev="sockfs" ino=100796 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2853.808259][ T30] audit: type=1326 audit(2000003601.611:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.1.9665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb7db8d169 code=0x0 [ 2854.495956][ T30] audit: type=1400 audit(2000003601.841:2929): avc: denied { setopt } for pid=6461 comm="syz.0.9661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2855.764193][ T6502] ipvlan1: entered promiscuous mode [ 2856.076794][ T30] audit: type=1400 audit(2000003603.831:2930): avc: denied { ioctl } for pid=6510 comm="syz.6.9679" path="socket:[100854]" dev="sockfs" ino=100854 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2857.979977][ T6531] /dev/nullb0: Can't lookup blockdev [ 2859.717630][ T6547] netlink: 'syz.3.9684': attribute type 4 has an invalid length. [ 2859.817608][ T6538] netlink: 'syz.3.9684': attribute type 4 has an invalid length. [ 2859.839712][ T6548] libceph: resolve '0.0' (ret=-3): failed [ 2860.241839][ T6553] overlayfs: failed to clone upperpath [ 2860.736445][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2861.111341][ T6568] bridge0: port 1(hsr_slave_1) entered blocking state [ 2861.118495][ T6568] bridge0: port 1(hsr_slave_1) entered disabled state [ 2861.128910][ T6568] hsr_slave_1: entered allmulticast mode [ 2861.142794][ T6568] hsr_slave_1: left allmulticast mode [ 2862.394447][ T6588] netlink: 'syz.1.9700': attribute type 4 has an invalid length. [ 2862.410297][ T6588] netlink: 'syz.1.9700': attribute type 4 has an invalid length. [ 2862.552880][ T6593] libceph: resolve '0.0' (ret=-3): failed [ 2863.547414][ T30] audit: type=1400 audit(2000003611.351:2931): avc: denied { read } for pid=6606 comm="syz.2.9707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 2864.573501][ T6620] fuse: Unknown parameter '…ð' [ 2864.986395][ T6634] libceph: resolve '0.0' (ret=-3): failed [ 2865.152968][ T30] audit: type=1400 audit(2000003612.961:2932): avc: denied { mount } for pid=6631 comm="syz.2.9715" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2865.386026][ T6649] netlink: 'syz.3.9718': attribute type 4 has an invalid length. [ 2865.387787][ T6652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2865.467218][ T6656] netlink: 'syz.6.9717': attribute type 4 has an invalid length. [ 2865.471728][ T6649] netlink: 'syz.3.9718': attribute type 4 has an invalid length. [ 2865.479823][T28285] lo speed is unknown, defaulting to 1000 [ 2865.488641][ T6656] netlink: 'syz.6.9717': attribute type 4 has an invalid length. [ 2865.500709][T28285] lo speed is unknown, defaulting to 1000 [ 2865.516863][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9721'. [ 2865.543864][ T6652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2865.622109][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2866.448019][ T6677] overlayfs: failed to clone upperpath [ 2866.776115][ T6687] libceph: resolve '0.0' (ret=-3): failed [ 2866.864457][ T6692] xt_cluster: node mask cannot exceed total number of nodes [ 2867.473113][ T6714] netlink: 'syz.3.9737': attribute type 4 has an invalid length. [ 2867.530064][ T6716] netlink: 'syz.3.9737': attribute type 4 has an invalid length. [ 2868.408506][ T6722] libceph: resolve '0.0' (ret=-3): failed [ 2869.197884][ T6738] /dev/nullb0: Can't lookup blockdev [ 2869.555228][ T6735] overlayfs: failed to clone upperpath [ 2869.676825][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9748'. [ 2869.760263][ T6750] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9748'. [ 2869.771731][ T6744] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9748'. [ 2869.931357][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9751'. [ 2870.012944][ T6755] ./file0: Can't lookup blockdev [ 2870.069781][ T6759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9753'. [ 2870.199438][ T6763] netlink: 'syz.1.9754': attribute type 4 has an invalid length. [ 2870.210335][ T6764] netlink: 'syz.2.9752': attribute type 4 has an invalid length. [ 2870.256463][ T6764] netlink: 'syz.2.9752': attribute type 4 has an invalid length. [ 2870.368488][ T6766] netlink: 'syz.1.9754': attribute type 4 has an invalid length. [ 2870.534495][T28285] »»»»»»7 speed is unknown, defaulting to 1000 [ 2870.581074][ T6769] Invalid source name [ 2870.591580][ T6769] UBIFS error (pid: 6769): cannot open "./file0", error -22 [ 2870.594090][T28285] »»»»»»7 speed is unknown, defaulting to 1000 [ 2871.274250][ T2590] »»»»»»7 speed is unknown, defaulting to 1000 [ 2871.646308][ T30] audit: type=1400 audit(2000003619.451:2933): avc: denied { shutdown } for pid=6779 comm="syz.0.9759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2872.054961][ T6798] fuse: Bad value for 'user_id' [ 2872.069199][ T6798] fuse: Bad value for 'user_id' [ 2872.251562][ T6807] libceph: resolve '0.0' (ret=-3): failed [ 2872.290178][ T6808] libceph: resolve '0.0' (ret=-3): failed [ 2873.657985][ T6845] libceph: resolve '0.0' (ret=-3): failed [ 2873.825732][ T6854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2875.084944][ T6876] /dev/nullb0: Can't lookup blockdev [ 2877.017118][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9798'. [ 2878.157254][ T6910] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9803'. [ 2878.228637][ T6911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6911 comm=syz.6.9804 [ 2878.253289][ T6910] netlink: 'syz.0.9803': attribute type 10 has an invalid length. [ 2878.277505][ T6911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6911 comm=syz.6.9804 [ 2878.290676][ T6910] hsr_slave_0: left promiscuous mode [ 2878.299400][ T6910] hsr_slave_1: left promiscuous mode [ 2878.321560][ T6917] fuse: Bad value for 'user_id' [ 2878.326469][ T6917] fuse: Bad value for 'user_id' [ 2878.328785][ T6911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6911 comm=syz.6.9804 [ 2878.344570][ T6911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6911 comm=syz.6.9804 [ 2878.444504][ T6926] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9807'. [ 2878.471717][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9807'. [ 2878.479231][ T6921] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9807'. [ 2878.699248][ T30] audit: type=1326 audit(2000003626.501:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2879.562910][ T30] audit: type=1326 audit(2000003626.501:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2879.606797][ T30] audit: type=1326 audit(2000003626.501:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2879.638173][ T30] audit: type=1326 audit(2000003626.501:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2879.669391][ T30] audit: type=1326 audit(2000003626.501:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2879.693115][ T30] audit: type=1326 audit(2000003626.501:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2879.716778][ T30] audit: type=1326 audit(2000003626.501:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2879.769615][ T30] audit: type=1326 audit(2000003626.501:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2879.842817][ T6939] libceph: resolve '0.0' (ret=-3): failed [ 2879.856715][ T30] audit: type=1326 audit(2000003626.501:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2880.050071][ T30] audit: type=1326 audit(2000003626.501:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.6.9809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2882.008960][ T6983] /dev/nullb0: Can't lookup blockdev [ 2883.262312][ T7007] /dev/nullb0: Can't lookup blockdev [ 2883.911510][ T7000] netlink: 'syz.6.9829': attribute type 10 has an invalid length. [ 2883.929830][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9829'. [ 2883.938738][ T7000] bridge_slave_1: left allmulticast mode [ 2883.948962][ T7000] bridge_slave_1: left promiscuous mode [ 2883.955439][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2883.968734][ T7015] libceph: resolve '0.0' (ret=-3): failed [ 2883.995540][ T7000] bridge_slave_0: left allmulticast mode [ 2884.009113][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2884.150771][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9829'. [ 2884.826389][ T7034] /dev/nullb0: Can't lookup blockdev [ 2885.776930][ T7044] /dev/nullb0: Can't lookup blockdev [ 2886.382624][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9844'. [ 2886.705095][ T7045] bridge0: port 1(hsr_slave_1) entered blocking state [ 2886.712027][ T7045] bridge0: port 1(hsr_slave_1) entered disabled state [ 2886.718974][ T7045] hsr_slave_1: entered allmulticast mode [ 2886.727777][ T7045] hsr_slave_1: left allmulticast mode [ 2887.020420][ T7062] Invalid source name [ 2887.024497][ T7062] UBIFS error (pid: 7062): cannot open "./file0", error -22 [ 2888.352643][ T7092] /dev/nullb0: Can't lookup blockdev [ 2888.869505][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9858'. [ 2889.054113][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9860'. [ 2889.703881][ T7105] Invalid source name [ 2889.707962][ T7105] UBIFS error (pid: 7105): cannot open "./file0", error -22 [ 2890.035423][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 2890.035440][ T30] audit: type=1326 audit(2000003637.841:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.085544][ T30] audit: type=1326 audit(2000003637.891:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.131584][ T30] audit: type=1326 audit(2000003637.921:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.183374][ T30] audit: type=1326 audit(2000003637.921:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.234677][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9864'. [ 2890.242019][ T30] audit: type=1326 audit(2000003637.921:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.344232][ T30] audit: type=1326 audit(2000003637.921:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.497151][ T30] audit: type=1326 audit(2000003637.921:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.602690][ T30] audit: type=1326 audit(2000003637.921:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.660662][ T30] audit: type=1326 audit(2000003637.921:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f394a78bad0 code=0x7ffc0000 [ 2890.695973][ T30] audit: type=1326 audit(2000003637.921:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.6.9862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2890.779705][ T7130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2891.181617][ T7143] /dev/nullb0: Can't lookup blockdev [ 2895.317130][ T7187] /dev/nullb0: Can't lookup blockdev [ 2895.524360][ T7191] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9884'. [ 2895.642704][ T2590] libceph: connect (1)[c::]:6789 error -101 [ 2895.649004][ T2590] libceph: mon0 (1)[c::]:6789 connect error [ 2896.663242][ T2590] libceph: connect (1)[c::]:6789 error -101 [ 2896.679350][ T2590] libceph: mon0 (1)[c::]:6789 connect error [ 2896.865713][ T7193] ceph: No mds server is up or the cluster is laggy [ 2897.218549][ T2590] libceph: connect (1)[c::]:6789 error -101 [ 2897.432335][ T7210] /dev/nullb0: Can't lookup blockdev [ 2897.506428][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.652512][ T2590] libceph: mon0 (1)[c::]:6789 connect error [ 2897.868967][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9891'. [ 2897.928443][ T7212] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9890'. [ 2899.262990][ T7214] Invalid source name [ 2899.267019][ T7214] UBIFS error (pid: 7214): cannot open "./file0", error -22 [ 2900.156072][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2900.549639][ T7244] bridge0: port 1(hsr_slave_1) entered blocking state [ 2900.556479][ T7244] bridge0: port 1(hsr_slave_1) entered disabled state [ 2900.564431][ T7244] hsr_slave_1: entered allmulticast mode [ 2900.570674][ T7244] hsr_slave_1: entered promiscuous mode [ 2900.579260][ T7244] bridge0: port 1(hsr_slave_1) entered blocking state [ 2900.586054][ T7244] bridge0: port 1(hsr_slave_1) entered forwarding state [ 2902.269576][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9908'. [ 2903.136768][ T7279] Invalid source name [ 2903.140866][ T7279] UBIFS error (pid: 7279): cannot open "./file0", error -22 [ 2903.593596][ T7293] libceph: resolve '0.0' (ret=-3): failed [ 2904.492695][ T7284] netlink: 296 bytes leftover after parsing attributes in process `syz.0.9913'. [ 2905.016630][ T7313] netlink: 'syz.6.9923': attribute type 1 has an invalid length. [ 2905.067111][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2905.566587][ T7325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9927'. [ 2905.584778][ T7325] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9927'. [ 2906.964200][ T7347] netlink: 'syz.1.9931': attribute type 4 has an invalid length. [ 2906.975015][ T7347] netlink: 'syz.1.9931': attribute type 4 has an invalid length. [ 2908.250728][ T7361] libceph: resolve '0.0' (ret=-3): failed [ 2908.338441][ T7366] /dev/nullb0: Can't lookup blockdev [ 2909.480703][ T7375] libceph: resolve '0.0' (ret=-3): failed [ 2909.845059][ T7385] »»»»»»7 speed is unknown, defaulting to 1000 [ 2909.851802][ T7385] wg1 speed is unknown, defaulting to 1000 [ 2909.857965][ T7385] »»»»»»7 speed is unknown, defaulting to 1000 [ 2909.898623][ T7385] lo speed is unknown, defaulting to 1000 [ 2910.124506][ T7388] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9949'. [ 2910.892746][ T7401] netlink: 'syz.1.9953': attribute type 4 has an invalid length. [ 2911.134181][ T7410] libceph: resolve '0.0' (ret=-3): failed [ 2911.330245][ T7415] netlink: 'syz.3.9958': attribute type 4 has an invalid length. [ 2911.790937][ T7434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9964'. [ 2912.631420][ T7437] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 2912.874425][ T7443] netlink: 'syz.0.9967': attribute type 4 has an invalid length. [ 2912.913993][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2912.914011][ T30] audit: type=1400 audit(2000003660.701:2993): avc: denied { ioctl } for pid=7446 comm="syz.3.9969" path="socket:[103177]" dev="sockfs" ino=103177 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2913.227469][ T7465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2913.228415][ T7466] netlink: 'syz.6.9976': attribute type 10 has an invalid length. [ 2913.264426][ T7466] batman_adv: batadv0: Adding interface: wlan1 [ 2913.276522][ T7466] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2913.314618][ T7466] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 2913.418119][ T7470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2913.577782][ T7474] bridge0: port 3(hsr_slave_1) entered blocking state [ 2913.587107][ T7474] bridge0: port 3(hsr_slave_1) entered disabled state [ 2913.598953][ T7474] hsr_slave_1: entered allmulticast mode [ 2913.838918][ T7474] hsr_slave_1: left allmulticast mode [ 2913.960049][ T7470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2915.083029][ T7493] overlayfs: missing 'lowerdir' [ 2915.674370][ T30] audit: type=1326 audit(2000003663.481:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.3.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2915.722185][ T30] audit: type=1326 audit(2000003663.501:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.3.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2915.747032][ T30] audit: type=1326 audit(2000003663.511:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.3.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2915.779617][ T30] audit: type=1326 audit(2000003663.511:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.3.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2915.940008][ T30] audit: type=1326 audit(2000003663.511:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.3.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2915.980428][ T7509] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9990'. [ 2916.415434][ T30] audit: type=1326 audit(2000003663.511:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.3.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2916.502868][ T30] audit: type=1326 audit(2000003663.511:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.3.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2916.531797][ T30] audit: type=1326 audit(2000003663.511:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7499 comm="syz.3.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2916.709881][ T30] audit: type=1326 audit(2000003663.531:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.6.9986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x0 [ 2917.015112][ T7524] bridge0: port 3(hsr_slave_1) entered blocking state [ 2917.022224][ T7524] bridge0: port 3(hsr_slave_1) entered disabled state [ 2917.029708][ T7524] hsr_slave_1: entered allmulticast mode [ 2917.040453][ T7524] hsr_slave_1: left allmulticast mode [ 2917.595869][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9996'. [ 2918.470819][ T7547] xt_l2tp: v2 doesn't support IP mode [ 2918.709091][ T7550] bridge0: port 3(hsr_slave_1) entered blocking state [ 2918.718268][ T7550] bridge0: port 3(hsr_slave_1) entered disabled state [ 2918.737604][ T7550] hsr_slave_1: entered allmulticast mode [ 2918.833295][ T7550] hsr_slave_1: left allmulticast mode [ 2919.095020][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2919.146661][ T7556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2919.219398][ T7556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2919.288912][ T7556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2920.024855][ T7566] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2921.848326][ T7584] /dev/nullb0: Can't lookup blockdev [ 2923.097407][ T7614] netlink: 'syz.0.10022': attribute type 4 has an invalid length. [ 2923.154153][ T7615] netlink: 'syz.0.10022': attribute type 4 has an invalid length. [ 2924.555298][ T7630] /dev/nullb0: Can't lookup blockdev [ 2924.566715][ T7631] bridge0: port 1(hsr_slave_1) entered blocking state [ 2924.574404][ T7631] bridge0: port 1(hsr_slave_1) entered disabled state [ 2924.582979][ T7631] hsr_slave_1: entered allmulticast mode [ 2924.605844][ T7631] hsr_slave_1: left allmulticast mode [ 2925.084527][ T7639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10028'. [ 2925.544915][ T7644] Invalid source name [ 2925.549063][ T7644] UBIFS error (pid: 7644): cannot open "./file0", error -22 [ 2926.076678][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10032'. [ 2926.173803][ T7653] /dev/nullb0: Can't lookup blockdev [ 2927.354996][ T7655] No source specified [ 2927.411278][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2928.369959][ T7668] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10037'. [ 2929.227459][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2934.567173][ T7739] bridge0: port 1(hsr_slave_1) entered blocking state [ 2934.574416][ T7739] bridge0: port 1(hsr_slave_1) entered disabled state [ 2934.583711][ T7739] hsr_slave_1: entered allmulticast mode [ 2934.603681][ T7739] hsr_slave_1: left allmulticast mode [ 2937.886130][ T7783] /dev/nullb0: Can't lookup blockdev [ 2939.171014][ T7800] /dev/nullb0: Can't lookup blockdev [ 2939.679604][ T7798] bridge0: port 1(hsr_slave_1) entered blocking state [ 2939.686573][ T7798] bridge0: port 1(hsr_slave_1) entered disabled state [ 2939.693619][ T7798] hsr_slave_1: entered allmulticast mode [ 2939.700321][ T7798] hsr_slave_1: left allmulticast mode [ 2939.929884][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10081'. [ 2941.382282][ T7840] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2941.562307][ T7838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10092'. [ 2943.282277][ T7871] /dev/nullb0: Can't lookup blockdev [ 2945.148007][ T7887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10107'. [ 2945.181808][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10108'. [ 2945.524289][ T7896] No source specified [ 2945.833652][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10111'. [ 2946.009906][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10111'. [ 2946.129902][ T7903] tipc: Trying to set illegal importance in message [ 2946.174681][ T7907] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2947.707824][ T30] audit: type=1804 audit(2000003695.515:3003): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.10123" name="file0" dev="tmpfs" ino=11559 res=1 errno=0 [ 2947.746137][ T7934] ref_ctr_offset mismatch. inode: 0x2d27 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 2948.089160][ T7942] bridge0: port 3(hsr_slave_1) entered blocking state [ 2948.097459][ T7942] bridge0: port 3(hsr_slave_1) entered disabled state [ 2948.114631][ T7942] hsr_slave_1: entered allmulticast mode [ 2948.266736][ T7942] hsr_slave_1: left allmulticast mode [ 2948.561432][ T7945] netlink: 'syz.0.10126': attribute type 4 has an invalid length. [ 2948.593082][ T7945] netlink: 'syz.0.10126': attribute type 4 has an invalid length. [ 2948.735438][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2949.065598][ T7955] /dev/nullb0: Can't lookup blockdev [ 2950.116779][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2950.197568][ T7972] netlink: 'syz.1.10136': attribute type 4 has an invalid length. [ 2951.248956][ T7984] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 2951.257451][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10139'. [ 2951.266557][ T7984] netlink: 'syz.1.10139': attribute type 21 has an invalid length. [ 2951.489891][ T7986] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10141'. [ 2951.910280][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2952.235567][ T7996] /dev/nullb0: Can't lookup blockdev [ 2953.289977][ T8000] xt_cluster: node mask cannot exceed total number of nodes [ 2953.371143][ T8004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26590 sclass=netlink_route_socket pid=8004 comm=syz.0.10147 [ 2953.731273][ T8017] libceph: resolve '0.0' (ret=-3): failed [ 2953.863525][ T8022] bridge0: port 1(hsr_slave_1) entered blocking state [ 2953.872943][ T8022] bridge0: port 1(hsr_slave_1) entered disabled state [ 2953.896178][ T8022] hsr_slave_1: entered allmulticast mode [ 2954.047174][ T8022] hsr_slave_1: left allmulticast mode [ 2954.256777][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10153'. [ 2956.212512][ T8051] xt_cluster: node mask cannot exceed total number of nodes [ 2956.414412][ T8057] libceph: resolve '0.0' (ret=-3): failed [ 2956.587023][ T8062] bridge0: port 3(hsr_slave_1) entered blocking state [ 2956.596182][ T8062] bridge0: port 3(hsr_slave_1) entered disabled state [ 2956.612879][ T8062] hsr_slave_1: entered allmulticast mode [ 2956.783965][ T8062] hsr_slave_1: left allmulticast mode [ 2957.228847][ T30] audit: type=1326 audit(2000003705.035:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.3.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2957.335554][ T30] audit: type=1326 audit(2000003705.035:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.3.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2957.414471][ T30] audit: type=1326 audit(2000003705.035:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.3.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2957.545593][ T30] audit: type=1326 audit(2000003705.035:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.3.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2957.607967][ T30] audit: type=1326 audit(2000003705.035:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.3.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2957.634202][ T30] audit: type=1326 audit(2000003705.035:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.3.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2957.657982][ T30] audit: type=1326 audit(2000003705.035:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.3.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2957.702147][ T8080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10174'. [ 2957.717148][ T30] audit: type=1326 audit(2000003705.035:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.3.10166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x7ffc0000 [ 2957.790910][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10172'. [ 2957.877705][ T8082] team1: entered promiscuous mode [ 2957.891103][ T8082] 8021q: adding VLAN 0 to HW filter on device team1 [ 2959.039422][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.965224][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2960.624322][ T8116] futex_wake_op: syz.2.10184 tries to shift op by 32; fix this program [ 2961.409612][ T8131] bridge0: port 1(hsr_slave_1) entered blocking state [ 2961.416545][ T8131] bridge0: port 1(hsr_slave_1) entered disabled state [ 2961.423481][ T8131] hsr_slave_1: entered allmulticast mode [ 2961.429887][ T8131] hsr_slave_1: left allmulticast mode [ 2961.768136][ T8140] xt_cluster: node mask cannot exceed total number of nodes [ 2962.351254][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10192'. [ 2963.194897][ T30] audit: type=1326 audit(2000003711.005:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.6.10195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x0 [ 2963.264527][ T8164] »»»»»»7 speed is unknown, defaulting to 1000 [ 2963.289921][ T8164] wg1 speed is unknown, defaulting to 1000 [ 2963.296583][ T8164] »»»»»»7 speed is unknown, defaulting to 1000 [ 2964.233206][ T8164] lo speed is unknown, defaulting to 1000 [ 2964.432191][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10203'. [ 2964.526100][ T8181] bridge0: port 1(hsr_slave_1) entered blocking state [ 2964.534784][ T8181] bridge0: port 1(hsr_slave_1) entered disabled state [ 2964.551255][ T8181] hsr_slave_1: entered allmulticast mode [ 2965.032210][ T8181] hsr_slave_1: left allmulticast mode [ 2965.357182][ T8183] /dev/nullb0: Can't lookup blockdev [ 2965.563279][ T8178] No source specified [ 2965.807571][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10207'. [ 2966.064720][ T8198] overlayfs: failed to resolve './file0': -2 [ 2966.954088][ T8206] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10210'. [ 2967.686072][ T8221] bridge0: port 3(hsr_slave_1) entered blocking state [ 2967.694430][ T8221] bridge0: port 3(hsr_slave_1) entered disabled state [ 2967.713815][ T8221] hsr_slave_1: entered allmulticast mode [ 2967.855988][ T8221] hsr_slave_1: left allmulticast mode [ 2968.625764][ T8226] bridge0: port 1(hsr_slave_1) entered blocking state [ 2968.637001][ T8226] bridge0: port 1(hsr_slave_1) entered disabled state [ 2968.663058][ T8226] hsr_slave_1: entered allmulticast mode [ 2968.904385][ T8226] hsr_slave_1: left allmulticast mode [ 2969.201611][ T8232] overlayfs: failed to resolve './file0': -2 [ 2969.279209][ T8233] overlayfs: missing 'workdir' [ 2970.631700][ T8247] overlayfs: failed to resolve './file0': -2 [ 2970.877896][ T8251] /dev/nullb0: Can't lookup blockdev [ 2973.121405][ T8261] overlayfs: failed to clone upperpath [ 2973.693203][ T8289] overlayfs: failed to resolve './file0': -2 [ 2973.859730][ T8292] /dev/nullb0: Can't lookup blockdev [ 2974.427476][ T8296] netlink: 'syz.0.10229': attribute type 4 has an invalid length. [ 2974.482103][ T8296] netlink: 'syz.0.10229': attribute type 4 has an invalid length. [ 2974.604868][ T8302] geneve0: mtu greater than device maximum [ 2974.628350][ T8302] netlink: 'syz.2.10240': attribute type 10 has an invalid length. [ 2974.799588][ T8307] xt_cluster: node mask cannot exceed total number of nodes [ 2975.169833][ T8314] bridge0: port 1(hsr_slave_1) entered blocking state [ 2975.180336][ T8314] bridge0: port 1(hsr_slave_1) entered disabled state [ 2975.201036][ T8314] hsr_slave_1: entered allmulticast mode [ 2975.324520][ T8314] hsr_slave_1: left allmulticast mode [ 2975.899515][ T8327] /dev/nullb0: Can't lookup blockdev [ 2976.741227][ T8342] /dev/nullb0: Can't lookup blockdev [ 2977.126288][ T8346] cgroup: noprefix used incorrectly [ 2977.404393][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2978.342516][ T8365] openvswitch: netlink: Missing key (keys=440, expected=100) [ 2978.365827][ T30] audit: type=1400 audit(2000003726.175:3013): avc: denied { accept } for pid=8364 comm="syz.6.10260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2978.836328][ T8379] /dev/nullb0: Can't lookup blockdev [ 2978.905404][ T8380] bridge0: port 1(hsr_slave_1) entered blocking state [ 2978.913366][ T8380] bridge0: port 1(hsr_slave_1) entered disabled state [ 2978.926999][ T8380] hsr_slave_1: entered allmulticast mode [ 2978.959871][ T8380] hsr_slave_1: left allmulticast mode [ 2980.485337][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10264'. [ 2980.619275][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10264'. [ 2980.749611][ T8386] »»»»»»7 speed is unknown, defaulting to 1000 [ 2980.779880][ T8386] wg1 speed is unknown, defaulting to 1000 [ 2980.806809][ T8386] »»»»»»7 speed is unknown, defaulting to 1000 [ 2980.842587][ T8390] libceph: resolve '0.0' (ret=-3): failed [ 2980.936288][ T8386] lo speed is unknown, defaulting to 1000 [ 2982.228699][ T8409] xt_nfacct: accounting object `syz1' does not exists [ 2982.812898][ T8425] /dev/nullb0: Can't lookup blockdev [ 2983.322757][ T8427] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2983.509727][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10278'. [ 2985.534121][ T30] audit: type=1326 audit(2000003733.345:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.6.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2985.643577][ T30] audit: type=1326 audit(2000003733.345:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.6.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2986.178689][ T30] audit: type=1326 audit(2000003733.375:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.6.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2986.203411][ T30] audit: type=1326 audit(2000003733.375:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.6.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2986.283193][ T30] audit: type=1326 audit(2000003733.375:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.6.10288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 2986.659415][ T8488] libceph: resolve '0.0' (ret=-3): failed [ 2986.702022][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10302'. [ 2986.874845][ T8493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2987.583763][ T8501] xt_cluster: node mask cannot exceed total number of nodes [ 2989.215907][ T30] audit: type=1400 audit(2000003736.295:3019): avc: denied { map } for pid=8510 comm="syz.3.10306" path="socket:[107543]" dev="sockfs" ino=107543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2991.005010][ T8551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2991.393375][ T8567] libceph: resolve '0.0' (ret=-3): failed [ 2992.731265][ T8584] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2992.761034][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2993.860974][ T8590] bridge0: port 1(hsr_slave_1) entered blocking state [ 2993.868061][ T8590] bridge0: port 1(hsr_slave_1) entered disabled state [ 2993.875682][ T8590] hsr_slave_1: entered allmulticast mode [ 2993.930867][ T8590] hsr_slave_1: left allmulticast mode [ 2994.088594][ T8591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.930531][ T8591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.013941][ T8600] tipc: Enabling of bearer rejected, media not registered [ 2995.196533][ T8603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.317162][ T8609] bridge0: port 1(hsr_slave_1) entered blocking state [ 2995.326228][ T8609] bridge0: port 1(hsr_slave_1) entered disabled state [ 2995.352250][ T8609] hsr_slave_1: entered allmulticast mode [ 2995.482880][ T8609] hsr_slave_1: left allmulticast mode [ 2995.773551][ T8611] libceph: resolve '0.0' (ret=-3): failed [ 2995.798034][ T8613] libceph: resolve '. [ 2995.798034][ T8613] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 2995.798034][ T8613] ' (ret=-3): failed [ 2995.880233][ T8618] netlink: 'syz.0.10342': attribute type 4 has an invalid length. [ 2996.625507][ T8622] netlink: 'syz.0.10342': attribute type 4 has an invalid length. [ 2996.662774][ T30] audit: type=1400 audit(2000003744.475:3020): avc: denied { getopt } for pid=8626 comm="syz.6.10344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2998.320023][ T8648] libceph: resolve '0.0' (ret=-3): failed [ 2998.852177][ T8665] /dev/nullb0: Can't lookup blockdev [ 2999.332852][ T8673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 2999.345901][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 2999.817976][ T8674] bridge0: port 1(hsr_slave_1) entered blocking state [ 2999.824835][ T8674] bridge0: port 1(hsr_slave_1) entered disabled state [ 2999.831948][ T8674] hsr_slave_1: entered allmulticast mode [ 2999.838112][ T8674] hsr_slave_1: left allmulticast mode [ 2999.889407][ T8683] openvswitch: netlink: IP tunnel TTL not specified. [ 3000.811802][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10368'. [ 3001.133117][ T8707] Invalid source name [ 3001.137158][ T8707] UBIFS error (pid: 8707): cannot open "./file0", error -22 [ 3003.132537][ T8725] bridge0: port 3(hsr_slave_1) entered blocking state [ 3003.147631][ T8725] bridge0: port 3(hsr_slave_1) entered disabled state [ 3003.158860][ T8725] hsr_slave_1: entered allmulticast mode [ 3003.208629][ T8725] hsr_slave_1: left allmulticast mode [ 3003.803470][ T8711] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10371'. [ 3007.827640][ T8772] overlayfs: missing 'workdir' [ 3008.125019][ T8782] 9pnet_fd: Insufficient options for proto=fd [ 3008.844591][ T8804] bridge0: port 1(hsr_slave_1) entered blocking state [ 3008.852557][ T8804] bridge0: port 1(hsr_slave_1) entered disabled state [ 3008.867583][ T8804] hsr_slave_1: entered allmulticast mode [ 3008.902325][ T8804] hsr_slave_1: left allmulticast mode [ 3010.348580][ T8824] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3011.452620][ T8841] /dev/nullb0: Can't lookup blockdev [ 3014.118378][ T8874] /dev/nullb0: Can't lookup blockdev [ 3014.314395][ T8885] bridge0: port 1(hsr_slave_1) entered blocking state [ 3014.321392][ T8885] bridge0: port 1(hsr_slave_1) entered disabled state [ 3014.328466][ T8885] hsr_slave_1: entered allmulticast mode [ 3014.335425][ T8885] hsr_slave_1: left allmulticast mode [ 3014.766215][ T8868] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10422'. [ 3015.125641][ T30] audit: type=1326 audit(2000003762.925:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3015.169371][ T8894] xt_cluster: node mask cannot exceed total number of nodes [ 3015.249010][ T30] audit: type=1326 audit(2000003762.925:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.0.10428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3015.356671][ T8903] xt_cluster: node mask cannot exceed total number of nodes [ 3015.888039][ T8917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10432'. [ 3016.186416][ T8924] bridge0: port 1(hsr_slave_1) entered blocking state [ 3016.195798][ T8924] bridge0: port 1(hsr_slave_1) entered disabled state [ 3016.216054][ T8924] hsr_slave_1: entered allmulticast mode [ 3016.381757][ T8924] hsr_slave_1: left allmulticast mode [ 3016.932182][ T8935] bridge0: port 3(hsr_slave_1) entered blocking state [ 3016.939928][ T8935] bridge0: port 3(hsr_slave_1) entered disabled state [ 3016.946849][ T8935] hsr_slave_1: entered allmulticast mode [ 3016.953586][ T8935] hsr_slave_1: left allmulticast mode [ 3017.106421][ T8937] /dev/nullb0: Can't lookup blockdev [ 3019.042313][ T30] audit: type=1400 audit(2000003766.855:3023): avc: denied { ioctl } for pid=8953 comm="syz.3.10448" path="socket:[107308]" dev="sockfs" ino=107308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 3019.539309][ T8963] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10449'. [ 3019.822694][ T8975] netlink: 'syz.2.10453': attribute type 39 has an invalid length. [ 3020.349760][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.798884][ T8985] bridge0: port 1(hsr_slave_1) entered blocking state [ 3020.805730][ T8985] bridge0: port 1(hsr_slave_1) entered disabled state [ 3020.812852][ T8985] hsr_slave_1: entered allmulticast mode [ 3020.819447][ T8985] hsr_slave_1: left allmulticast mode [ 3021.674030][ T8994] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10461'. [ 3021.758360][ T9007] netlink: 'syz.1.10464': attribute type 1 has an invalid length. [ 3021.827052][ T9007] bond2: entered promiscuous mode [ 3021.888691][ T9007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3021.975924][ T9009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3021.980423][ T9018] netlink: 'syz.0.10467': attribute type 4 has an invalid length. [ 3022.011010][ T9009] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 3022.051140][ T9009] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 3022.073383][ T9009] bond2: (slave ip6gre1): making interface the new active one [ 3022.082341][ T9009] ip6gre1: entered promiscuous mode [ 3022.092270][ T9009] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 3022.235950][ T9027] overlayfs: failed to resolve './file0': -2 [ 3022.257683][ T9030] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 3023.409281][ T9044] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10478'. [ 3023.550493][ T9054] ipvlan3: entered promiscuous mode [ 3023.636871][ T9057] netlink: 'syz.3.10483': attribute type 4 has an invalid length. [ 3023.930551][ T9071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10489'. [ 3024.032452][ T9072] /dev/nullb0: Can't lookup blockdev [ 3024.896554][ T9087] netlink: 'syz.1.10496': attribute type 4 has an invalid length. [ 3025.110163][ T9091] ipvlan2: entered promiscuous mode [ 3026.309297][ T9100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10500'. [ 3026.627921][ T30] audit: type=1326 audit(2000003774.435:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9107 comm="syz.0.10502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3026.659713][ T30] audit: type=1326 audit(2000003774.475:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9107 comm="syz.0.10502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3027.830862][ T9126] netlink: 'syz.0.10505': attribute type 4 has an invalid length. [ 3028.122000][ T9124] netlink: 'syz.0.10505': attribute type 4 has an invalid length. [ 3028.723338][ T9132] bridge0: port 1(hsr_slave_1) entered blocking state [ 3028.731404][ T9132] bridge0: port 1(hsr_slave_1) entered disabled state [ 3028.742433][ T9132] hsr_slave_1: entered allmulticast mode [ 3028.779534][ T9132] hsr_slave_1: left allmulticast mode [ 3028.785011][ T9134] bridge0: port 3(hsr_slave_1) entered blocking state [ 3028.792013][ T9134] bridge0: port 3(hsr_slave_1) entered disabled state [ 3028.799109][ T9134] hsr_slave_1: entered allmulticast mode [ 3028.806710][ T9134] hsr_slave_1: left allmulticast mode [ 3030.444400][ T9121] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10506'. [ 3030.587400][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3031.569813][ T9152] bridge0: port 3(hsr_slave_1) entered blocking state [ 3031.576896][ T9152] bridge0: port 3(hsr_slave_1) entered disabled state [ 3031.584460][ T9152] hsr_slave_1: entered allmulticast mode [ 3031.591913][ T9152] hsr_slave_1: left allmulticast mode [ 3032.910378][ T9161] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10515'. [ 3033.749782][ T9175] bridge0: port 3(hsr_slave_1) entered blocking state [ 3033.758002][ T9175] bridge0: port 3(hsr_slave_1) entered disabled state [ 3033.779664][ T9175] hsr_slave_1: entered allmulticast mode [ 3033.902458][ T9175] hsr_slave_1: left allmulticast mode [ 3034.501960][ T9186] bridge0: port 1(hsr_slave_1) entered blocking state [ 3034.508836][ T9186] bridge0: port 1(hsr_slave_1) entered disabled state [ 3034.515706][ T9186] hsr_slave_1: entered allmulticast mode [ 3034.522015][ T9186] hsr_slave_1: left allmulticast mode [ 3035.537897][ T9199] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10531'. [ 3035.751346][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10534'. [ 3035.767454][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10534'. [ 3037.162220][ T9239] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10545'. [ 3037.865847][ T9251] bridge0: port 1(hsr_slave_1) entered blocking state [ 3037.872740][ T9251] bridge0: port 1(hsr_slave_1) entered disabled state [ 3037.879741][ T9251] hsr_slave_1: entered allmulticast mode [ 3037.885942][ T9251] hsr_slave_1: left allmulticast mode [ 3037.932914][ T9249] »»»»»»7 speed is unknown, defaulting to 1000 [ 3037.940156][ T9249] wg1 speed is unknown, defaulting to 1000 [ 3037.946789][ T9249] »»»»»»7 speed is unknown, defaulting to 1000 [ 3038.021104][ T9249] lo speed is unknown, defaulting to 1000 [ 3038.934398][ T9262] netlink: 'syz.0.10551': attribute type 4 has an invalid length. [ 3038.985075][ T9263] netlink: 'syz.0.10551': attribute type 4 has an invalid length. [ 3039.757373][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3040.139857][ T9290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10563'. [ 3040.402274][ T9296] Invalid source name [ 3040.406385][ T9296] UBIFS error (pid: 9296): cannot open "./file0", error -22 [ 3040.988853][ T9299] netlink: 'syz.2.10565': attribute type 4 has an invalid length. [ 3041.062547][ T9295] netlink: 'syz.2.10565': attribute type 4 has an invalid length. [ 3041.073007][ T2590] »»»»»»7 speed is unknown, defaulting to 1000 [ 3041.084238][ T2590] »»»»»»7 speed is unknown, defaulting to 1000 [ 3041.152355][T31681] »»»»»»7 speed is unknown, defaulting to 1000 [ 3041.501875][ T9302] fuse: Bad value for 'user_id' [ 3041.506935][ T9302] fuse: Bad value for 'user_id' [ 3043.278913][ T30] audit: type=1326 audit(2000003791.085:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3043.498880][ T30] audit: type=1326 audit(2000003791.085:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3043.528862][ T30] audit: type=1326 audit(2000003791.095:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3043.674696][ T9339] bridge0: port 1(hsr_slave_1) entered blocking state [ 3043.682804][ T9339] bridge0: port 1(hsr_slave_1) entered disabled state [ 3043.694516][ T9339] hsr_slave_1: entered allmulticast mode [ 3043.730775][ T9339] hsr_slave_1: left allmulticast mode [ 3044.078858][ T30] audit: type=1326 audit(2000003791.095:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3044.126852][ T30] audit: type=1326 audit(2000003791.095:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3044.129115][ T9341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10577'. [ 3044.161862][ T30] audit: type=1326 audit(2000003791.095:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3044.381943][ T30] audit: type=1326 audit(2000003791.095:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3044.395577][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10578'. [ 3044.406286][ T30] audit: type=1326 audit(2000003791.095:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3044.438949][ T30] audit: type=1326 audit(2000003791.095:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 3044.462979][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10578'. [ 3044.493084][ T9345] Invalid source name [ 3044.497132][ T9345] UBIFS error (pid: 9345): cannot open "./file0", error -22 [ 3044.509946][ T30] audit: type=1326 audit(2000003791.095:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9331 comm="syz.0.10574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3044.611333][ T9347] dvmrp0: left allmulticast mode [ 3044.660371][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3044.663416][ T9350] netlink: 'syz.6.10580': attribute type 1 has an invalid length. [ 3044.773012][ T9350] bond2: entered promiscuous mode [ 3044.779057][ T9350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3044.803987][ T9353] xt_cluster: node mask cannot exceed total number of nodes [ 3044.870419][ T9347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3044.878509][ T9347] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 3044.889797][ T9347] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 3044.901751][ T9347] bond2: (slave ip6gre1): making interface the new active one [ 3044.909719][ T9347] ip6gre1: entered promiscuous mode [ 3044.916594][ T9347] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 3045.127676][ T9362] libceph: resolve '0.0' (ret=-3): failed [ 3046.421086][ T9374] netlink: 'syz.0.10585': attribute type 4 has an invalid length. [ 3046.534275][ T9383] libceph: resolve '0.0' (ret=-3): failed [ 3047.205424][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3048.180588][ T9404] ipvlan4: entered promiscuous mode [ 3049.031702][ T9411] xt_cluster: node mask cannot exceed total number of nodes [ 3049.072909][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3049.382823][ T9419] bridge0: port 3(hsr_slave_1) entered blocking state [ 3049.389797][ T9419] bridge0: port 3(hsr_slave_1) entered disabled state [ 3049.396749][ T9419] hsr_slave_1: entered allmulticast mode [ 3049.403602][ T9419] hsr_slave_1: left allmulticast mode [ 3049.413215][ T9393] bridge0: port 1(hsr_slave_1) entered blocking state [ 3049.488910][ T9393] bridge0: port 1(hsr_slave_1) entered disabled state [ 3049.497254][ T9393] hsr_slave_1: entered allmulticast mode [ 3049.581728][ T9393] hsr_slave_1: left allmulticast mode [ 3049.937746][ T9426] libceph: resolve '0.0' (ret=-3): failed [ 3049.974945][ T9428] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 3050.697157][ T9459] overlayfs: failed to clone upperpath [ 3051.434881][ T9480] netlink: zone id is out of range [ 3051.440166][ T9480] netlink: zone id is out of range [ 3051.445279][ T9480] netlink: zone id is out of range [ 3051.450538][ T9480] netlink: zone id is out of range [ 3051.455627][ T9480] netlink: zone id is out of range [ 3051.460952][ T9480] netlink: zone id is out of range [ 3051.466320][ T9480] netlink: zone id is out of range [ 3051.471507][ T9480] netlink: zone id is out of range [ 3051.476631][ T9480] netlink: zone id is out of range [ 3051.481800][ T9480] netlink: zone id is out of range [ 3051.537869][ T9482] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10622'. [ 3051.547050][ T9482] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 3051.560732][ T9482] 1ªî{X¹¦: entered allmulticast mode [ 3051.887735][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10629'. [ 3052.743301][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3053.844831][ T9521] tipc: Can't bind to reserved service type 32 [ 3054.006558][ T9527] ipvlan5: entered promiscuous mode [ 3054.068980][ T9529] netlink: 1268 bytes leftover after parsing attributes in process `syz.6.10638'. [ 3054.699027][ T9541] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 3054.742282][ T9541] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 3055.230086][ T9541] netlink: 'syz.3.10644': attribute type 1 has an invalid length. [ 3055.302823][ T9548] xt_nfacct: accounting object `syz1' does not exists [ 3055.324497][ T9552] libceph: resolve '0.0' (ret=-3): failed [ 3055.571509][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10652'. [ 3055.618965][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10652'. [ 3055.656700][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 3055.656720][ T30] audit: type=1400 audit(2000003803.445:3092): avc: denied { accept } for pid=9565 comm="syz.0.10651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3057.297582][ T9581] bridge0: port 1(hsr_slave_1) entered blocking state [ 3057.304512][ T9581] bridge0: port 1(hsr_slave_1) entered disabled state [ 3057.311525][ T9581] hsr_slave_1: entered allmulticast mode [ 3057.318205][ T9581] hsr_slave_1: left allmulticast mode [ 3058.275829][ T9607] bridge0: port 3(hsr_slave_1) entered blocking state [ 3058.282742][ T9607] bridge0: port 3(hsr_slave_1) entered disabled state [ 3058.289983][ T9607] hsr_slave_1: entered allmulticast mode [ 3058.296921][ T9607] hsr_slave_1: left allmulticast mode [ 3058.880453][ T9611] xt_cluster: node mask cannot exceed total number of nodes [ 3059.881640][ T9628] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 3060.043515][ T9633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10672'. [ 3060.851194][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10674'. [ 3060.898011][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10674'. [ 3060.951063][ T9651] afs: Unknown parameter '0x0000000000000000' [ 3060.978797][ T9652] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 3061.111672][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10674'. [ 3061.443880][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3061.537901][ T9667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10681'. [ 3062.603976][ T9678] xt_cluster: node mask cannot exceed total number of nodes [ 3063.492677][ T9685] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 3063.639633][ T9688] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10686'. [ 3064.681504][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10689'. [ 3064.836711][ T9707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9707 comm=syz.2.10692 [ 3064.906371][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3067.202820][ T9738] netlink: 'syz.1.10700': attribute type 4 has an invalid length. [ 3068.644299][ T9758] Cannot find del_set index 4 as target [ 3068.728920][ T9758] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3068.904009][ T9758] Invalid ELF header magic: != ELF [ 3069.095842][ T30] audit: type=1400 audit(2000003816.715:3093): avc: denied { module_load } for pid=9745 comm="syz.1.10704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 3070.164008][ T9777] libceph: resolve '0.0' (ret=-3): failed [ 3070.678484][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10716'. [ 3070.687679][ T9784] netlink: 'syz.3.10716': attribute type 7 has an invalid length. [ 3070.695553][ T9784] netlink: 'syz.3.10716': attribute type 8 has an invalid length. [ 3070.703413][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10716'. [ 3070.775761][ T9797] netlink: 'syz.2.10721': attribute type 4 has an invalid length. [ 3070.816030][ T30] audit: type=1400 audit(2000003818.625:3094): avc: denied { getattr } for pid=9799 comm="syz.1.10720" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=110259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3070.881208][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10722'. [ 3071.245687][ T9818] Invalid source name [ 3071.249847][ T9818] UBIFS error (pid: 9818): cannot open "./file0", error -22 [ 3071.666870][ T9819] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 3071.676919][ T9821] netlink: 'syz.1.10728': attribute type 1 has an invalid length. [ 3071.861515][ T9830] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3072.028333][ T9837] netlink: 'syz.0.10734': attribute type 4 has an invalid length. [ 3072.280334][ T9850] SET target dimension over the limit! [ 3072.898311][ T9863] netlink: 'syz.6.10745': attribute type 4 has an invalid length. [ 3073.279077][ T30] audit: type=1326 audit(2000003821.085:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3073.366515][ T30] audit: type=1326 audit(2000003821.115:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3073.390537][ T30] audit: type=1326 audit(2000003821.115:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3073.424148][ T30] audit: type=1326 audit(2000003821.115:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3073.451725][ T30] audit: type=1326 audit(2000003821.115:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3073.484013][ T30] audit: type=1326 audit(2000003821.115:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3073.517965][ T30] audit: type=1326 audit(2000003821.115:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3073.671306][ T9876] ipvlan5: entered promiscuous mode [ 3073.824334][ T9882] bridge0: port 1(hsr_slave_1) entered blocking state [ 3073.833999][ T9882] bridge0: port 1(hsr_slave_1) entered disabled state [ 3073.848889][ T9882] hsr_slave_1: entered allmulticast mode [ 3074.058845][ T9882] hsr_slave_1: left allmulticast mode [ 3074.200047][ T30] audit: type=1326 audit(2000003821.115:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3074.366934][ T30] audit: type=1326 audit(2000003821.115:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3074.403128][ T9881] xt_NFQUEUE: number of total queues is 0 [ 3074.416221][ T30] audit: type=1326 audit(2000003821.115:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3074.488005][ T30] audit: type=1326 audit(2000003821.115:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3074.519558][ T30] audit: type=1326 audit(2000003821.115:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3074.573371][ T30] audit: type=1326 audit(2000003821.115:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3074.677505][ T30] audit: type=1326 audit(2000003821.115:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3074.717001][ T9897] netlink: 'syz.1.10759': attribute type 4 has an invalid length. [ 3074.736200][ T30] audit: type=1326 audit(2000003821.115:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9872 comm="syz.0.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca1f8d169 code=0x7ffc0000 [ 3074.769971][ T30] audit: type=1400 audit(2000003822.205:3110): avc: denied { open } for pid=9880 comm="syz.1.10752" path="/2118/file0" dev="tmpfs" ino=11196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3074.818060][ T30] audit: type=1400 audit(2000003822.215:3111): avc: denied { ioctl } for pid=9880 comm="syz.1.10752" path="/2118/file0" dev="tmpfs" ino=11196 ioctlcmd=0x127e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3075.220451][ T9918] bridge0: port 3(hsr_slave_1) entered blocking state [ 3075.229276][ T9918] bridge0: port 3(hsr_slave_1) entered disabled state [ 3075.243137][ T9918] hsr_slave_1: entered allmulticast mode [ 3075.387023][ T9918] hsr_slave_1: left allmulticast mode [ 3075.994766][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10769'. [ 3076.850768][ T9932] Invalid source name [ 3076.854831][ T9932] UBIFS error (pid: 9932): cannot open "./file0", error -22 [ 3077.254368][ T9934] tmpfs: Unknown parameter '|_@%quota' [ 3078.299605][ T9962] /dev/nullb0: Can't lookup blockdev [ 3078.455138][ T9966] overlayfs: failed to resolve './file0': -2 [ 3078.599566][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10786'. [ 3078.622860][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10786'. [ 3079.012473][ T9992] tipc: Enabled bearer , priority 10 [ 3079.869066][T14946] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3080.519895][T10003] bridge0: port 1(hsr_slave_1) entered blocking state [ 3080.526756][T10003] bridge0: port 1(hsr_slave_1) entered disabled state [ 3080.533777][T10003] hsr_slave_1: entered allmulticast mode [ 3080.540490][T10003] hsr_slave_1: left allmulticast mode [ 3080.801815][T10015] netlink: 288 bytes leftover after parsing attributes in process `syz.6.10800'. [ 3081.761101][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.933454][T10043] /dev/nullb0: Can't lookup blockdev [ 3082.112807][T10042] netlink: 'syz.0.10807': attribute type 4 has an invalid length. [ 3083.939023][T10067] /dev/nullb0: Can't lookup blockdev [ 3084.291282][T10069] bridge0: port 1(hsr_slave_1) entered blocking state [ 3084.300139][T10069] bridge0: port 1(hsr_slave_1) entered disabled state [ 3084.320431][T10069] hsr_slave_1: entered allmulticast mode [ 3084.436250][T10069] hsr_slave_1: left allmulticast mode [ 3085.024823][T10089] /dev/nullb0: Can't lookup blockdev [ 3085.563735][T10090] »»»»»»7 speed is unknown, defaulting to 1000 [ 3085.578301][T10090] wg1 speed is unknown, defaulting to 1000 [ 3085.585337][T10090] »»»»»»7 speed is unknown, defaulting to 1000 [ 3086.057840][T10090] lo speed is unknown, defaulting to 1000 [ 3087.060475][T10097] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 3088.078036][T10117] xt_SECMARK: invalid mode: 2 [ 3088.383394][T10124] libceph: resolve '0.0' (ret=-3): failed [ 3088.475613][T10127] /dev/nullb0: Can't lookup blockdev [ 3088.576130][T10130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10829'. [ 3088.907860][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3089.355182][T10141] bridge: RTM_NEWNEIGH with invalid ether address [ 3090.918950][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3091.070898][T10155] libceph: resolve '0.0' (ret=-3): failed [ 3091.323193][T10169] bridge0: port 1(hsr_slave_1) entered blocking state [ 3091.362250][T10169] bridge0: port 1(hsr_slave_1) entered disabled state [ 3091.383814][T10169] hsr_slave_1: entered allmulticast mode [ 3091.401259][T10169] hsr_slave_1: left allmulticast mode [ 3091.417815][T10174] /dev/nullb0: Can't lookup blockdev [ 3092.687821][T10198] vlan2: entered promiscuous mode [ 3092.703615][T10200] libceph: resolve '0.0' (ret=-3): failed [ 3093.047666][T10220] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 3093.620245][T10229] bridge0: port 1(hsr_slave_1) entered blocking state [ 3093.627201][T10229] bridge0: port 1(hsr_slave_1) entered disabled state [ 3093.634507][T10229] hsr_slave_1: entered allmulticast mode [ 3093.640785][T10229] hsr_slave_1: left allmulticast mode [ 3093.730199][T10234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10864'. [ 3094.268898][T10249] bridge0: port 1(hsr_slave_1) entered blocking state [ 3094.276139][T10249] bridge0: port 1(hsr_slave_1) entered disabled state [ 3094.284799][T10249] hsr_slave_1: entered allmulticast mode [ 3094.300357][T10249] hsr_slave_1: left allmulticast mode [ 3094.887199][T10248] /dev/nullb0: Can't lookup blockdev [ 3095.625837][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10874'. [ 3095.984508][T10282] bridge0: port 3(hsr_slave_1) entered blocking state [ 3095.991490][T10282] bridge0: port 3(hsr_slave_1) entered disabled state [ 3095.998373][T10282] hsr_slave_1: entered allmulticast mode [ 3096.005097][T10282] hsr_slave_1: left allmulticast mode [ 3096.216908][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 3096.216923][ T30] audit: type=1326 audit(2000003844.025:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3096.270961][ T30] audit: type=1326 audit(2000003844.055:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3096.296185][ T30] audit: type=1326 audit(2000003844.065:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3096.346740][ T30] audit: type=1326 audit(2000003844.065:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3096.391746][ T30] audit: type=1326 audit(2000003844.065:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3096.420795][ T30] audit: type=1326 audit(2000003844.065:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3096.445092][ T30] audit: type=1326 audit(2000003844.065:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3096.970297][ T30] audit: type=1326 audit(2000003844.065:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3097.036662][ T30] audit: type=1326 audit(2000003844.065:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3097.145275][ T30] audit: type=1326 audit(2000003844.065:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x50000 [ 3097.191456][T10296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10881'. [ 3097.434468][T10301] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3098.138354][T10309] netlink: 'syz.1.10880': attribute type 4 has an invalid length. [ 3098.364562][T10288] netlink: 'syz.1.10880': attribute type 4 has an invalid length. [ 3098.615307][T10320] fuse: Bad value for 'fd' [ 3098.714451][T10325] overlayfs: failed to clone upperpath [ 3099.700857][T10341] /dev/nullb0: Can't lookup blockdev [ 3101.899098][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10899'. [ 3103.209091][ T30] kauditd_printk_skb: 3231 callbacks suppressed [ 3103.209107][ T30] audit: type=1400 audit(2000003851.015:6354): avc: denied { ioctl } for pid=10394 comm="syz.6.10910" path="socket:[111314]" dev="sockfs" ino=111314 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 3105.146528][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10929'. [ 3105.380293][T10454] fuse: Bad value for 'fd' [ 3105.965692][T10461] overlayfs: failed to resolve './file0': -2 [ 3106.509324][ T30] audit: type=1800 audit(2000003854.305:6355): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.10940" name="bus" dev="tmpfs" ino=10672 res=0 errno=0 [ 3108.163243][T10492] Cannot find set identified by id 1 to match [ 3109.331508][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10948'. [ 3109.351329][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10948'. [ 3109.534877][ T30] audit: type=1326 audit(2000003857.345:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3109.921083][ T30] audit: type=1326 audit(2000003857.385:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3109.959628][ T30] audit: type=1326 audit(2000003857.385:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3109.985616][ T30] audit: type=1326 audit(2000003857.385:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3110.011344][ T30] audit: type=1326 audit(2000003857.385:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3110.035726][ T30] audit: type=1326 audit(2000003857.385:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3110.085892][ T30] audit: type=1326 audit(2000003857.385:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3110.131888][ T30] audit: type=1326 audit(2000003857.385:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3110.220219][ T30] audit: type=1326 audit(2000003857.385:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3110.348989][T10530] bridge0: port 1(hsr_slave_1) entered blocking state [ 3110.357717][T10530] bridge0: port 1(hsr_slave_1) entered disabled state [ 3110.368867][T10530] hsr_slave_1: entered allmulticast mode [ 3110.614360][T10530] hsr_slave_1: left allmulticast mode [ 3110.760884][ T30] audit: type=1326 audit(2000003857.385:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.1.10951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7db8d169 code=0x7ffc0000 [ 3111.101350][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10961'. [ 3111.118483][T10538] /dev/nullb0: Can't lookup blockdev [ 3111.225739][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10961'. [ 3111.255413][T10548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10548 comm=syz.3.10963 [ 3112.001702][T10560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10966'. [ 3112.362386][T10576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10974'. [ 3113.981868][T10605] Invalid ELF header magic: != ELF [ 3113.988297][T10605] netlink: 'syz.2.10983': attribute type 2 has an invalid length. [ 3113.997253][T10605] netlink: 'syz.2.10983': attribute type 1 has an invalid length. [ 3114.167965][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10988'. [ 3114.635876][T10628] /dev/nullb0: Can't lookup blockdev [ 3114.656486][T10629] /dev/nullb0: Can't lookup blockdev [ 3115.088394][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3115.350933][T10633] libceph: resolve '0.0' (ret=-3): failed [ 3115.409250][T10635] libceph: resolve '0.0' (ret=-3): failed [ 3115.576887][T10647] »»»»»»7 speed is unknown, defaulting to 1000 [ 3115.593219][T10649] Cannot find set identified by id 65534 to match [ 3115.621785][T10647] wg1 speed is unknown, defaulting to 1000 [ 3115.653175][T10647] »»»»»»7 speed is unknown, defaulting to 1000 [ 3116.051312][T10647] lo speed is unknown, defaulting to 1000 [ 3116.433239][T10668] /dev/nullb0: Can't lookup blockdev [ 3117.108201][T10670] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11007'. [ 3118.195052][T10693] netlink: 'syz.0.11017': attribute type 10 has an invalid length. [ 3118.207290][T10693] : (slave wlan1): Enslaving as an active interface with an up link [ 3119.287914][T10711] /dev/nullb0: Can't lookup blockdev [ 3120.203196][T10729] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11028'. [ 3120.704020][T10736] bridge_slave_0: invalid flags given to default FDB implementation [ 3121.694616][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11036'. [ 3121.926281][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11037'. [ 3122.180458][T10766] Invalid source name [ 3122.184507][T10766] UBIFS error (pid: 10766): cannot open "./file0", error -22 [ 3123.985229][T10782] netlink: 'syz.6.11045': attribute type 4 has an invalid length. [ 3124.592969][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 3124.592986][ T30] audit: type=1400 audit(2000003872.405:6423): avc: denied { shutdown } for pid=10794 comm="syz.3.11049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3124.926168][T10805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3124.936440][ T30] audit: type=1400 audit(2000003872.735:6424): avc: denied { ioctl } for pid=10803 comm="syz.2.11052" path="socket:[112894]" dev="sockfs" ino=112894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 3125.008943][ T30] audit: type=1400 audit(2000003872.735:6425): avc: denied { write } for pid=10803 comm="syz.2.11052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 3125.048658][ T30] audit: type=1400 audit(2000003872.735:6426): avc: denied { setattr } for pid=10803 comm="syz.2.11052" name="NETLINK" dev="sockfs" ino=112894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 3125.108202][T10808] netlink: 88 bytes leftover after parsing attributes in process `syz.1.11053'. [ 3125.455008][T10815] »»»»»»7 speed is unknown, defaulting to 1000 [ 3125.504114][T10815] wg1 speed is unknown, defaulting to 1000 [ 3125.526787][T10815] »»»»»»7 speed is unknown, defaulting to 1000 [ 3125.741524][T10815] lo speed is unknown, defaulting to 1000 [ 3125.963398][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11061'. [ 3126.622639][T10846] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11067'. [ 3126.916115][T10857] vcan0: entered allmulticast mode [ 3126.930404][T10857] vcan0: left allmulticast mode [ 3127.244504][T10876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23808 sclass=netlink_route_socket pid=10876 comm=syz.1.11075 [ 3127.616589][T10890] bridge0: port 1(hsr_slave_1) entered blocking state [ 3127.623673][T10890] bridge0: port 1(hsr_slave_1) entered disabled state [ 3127.634057][T10890] hsr_slave_1: entered allmulticast mode [ 3127.657046][T10890] hsr_slave_1: left allmulticast mode [ 3128.262342][T10897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11085'. [ 3128.300223][T10897] tipc: Enabling of bearer rejected, media not registered [ 3128.413779][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11085'. [ 3128.516795][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11088'. [ 3129.257343][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11090'. [ 3129.493228][ T30] audit: type=1400 audit(2000003877.305:6427): avc: denied { mounton } for pid=10918 comm="syz.1.11092" path=2F323139342FE91F7189591E9233614B dev="tmpfs" ino=11594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 3130.522733][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3131.641173][T10938] xt_nfacct: accounting object `syz1' does not exists [ 3131.868093][T10949] libceph: resolve '0.0' (ret=-3): failed [ 3132.600320][T10959] kAFS: Can only specify source 'none' with -o dyn [ 3134.253661][T10985] 8021q: VLANs not supported on ip6_vti0 [ 3134.450910][T10990] bridge0: port 1(hsr_slave_1) entered blocking state [ 3134.462062][T10990] bridge0: port 1(hsr_slave_1) entered disabled state [ 3134.478380][T10990] hsr_slave_1: entered allmulticast mode [ 3134.640897][T10990] hsr_slave_1: left allmulticast mode [ 3136.330689][T11008] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 3137.412257][T11026] bridge0: port 1(hsr_slave_1) entered blocking state [ 3137.419579][T11026] bridge0: port 1(hsr_slave_1) entered disabled state [ 3137.426503][T11026] hsr_slave_1: entered allmulticast mode [ 3137.433531][T11026] hsr_slave_1: left allmulticast mode [ 3137.838462][T11036] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 3139.197237][T11070] overlayfs: failed to clone lowerpath [ 3140.803592][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11145'. [ 3141.762022][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11148'. [ 3143.110814][T11122] libceph: resolve '0.0' (ret=-3): failed [ 3143.190879][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.487855][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11154'. [ 3144.185733][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11160'. [ 3145.340292][T11154] libceph: resolve '0.0' (ret=-3): failed [ 3145.827543][T11172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3145.839164][T11172] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3146.047215][T11172] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3146.056764][T11172] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3146.070344][T11172] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3146.080217][T11172] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3146.668385][ T30] audit: type=1400 audit(2000003894.475:6428): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 3146.728272][T11170] »»»»»»7 speed is unknown, defaulting to 1000 [ 3146.760430][T11170] wg1 speed is unknown, defaulting to 1000 [ 3146.776279][T11170] »»»»»»7 speed is unknown, defaulting to 1000 [ 3146.879503][T11188] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 3147.022066][T11170] lo speed is unknown, defaulting to 1000 [ 3147.099646][T11196] xt_TCPMSS: Only works on TCP SYN packets [ 3147.131815][T11193] libceph: resolve '0.0' (ret=-3): failed [ 3147.265124][T11202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=45 sclass=netlink_tcpdiag_socket pid=11202 comm=syz.3.11179 [ 3148.295772][T11170] chnl_net:caif_netlink_parms(): no params data found [ 3148.564514][T11219] cgroup: Name too long [ 3148.715898][T11172] Bluetooth: hci3: command tx timeout [ 3149.299987][T11170] bridge0: port 1(bridge_slave_0) entered blocking state [ 3149.346753][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 3149.369439][T11170] bridge_slave_0: entered allmulticast mode [ 3149.376411][T11170] bridge_slave_0: entered promiscuous mode [ 3149.510529][T11170] bridge0: port 2(bridge_slave_1) entered blocking state [ 3149.528890][T11170] bridge0: port 2(bridge_slave_1) entered disabled state [ 3150.126510][T11170] bridge_slave_1: entered allmulticast mode [ 3150.138434][T11170] bridge_slave_1: entered promiscuous mode [ 3150.294020][T11170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3150.312149][T11170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3150.444002][T11170] team0: Port device team_slave_0 added [ 3150.538201][T11170] team0: Port device team_slave_1 added [ 3150.667744][T11242] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11190'. [ 3150.716471][T11244] netlink: 'syz.3.11191': attribute type 4 has an invalid length. [ 3150.754843][T11246] raw_sendmsg: syz.2.11192 forgot to set AF_INET. Fix it! [ 3150.785400][T11170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3150.799394][T11172] Bluetooth: hci3: command tx timeout [ 3150.815042][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3150.863047][T11170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3150.877199][T11170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3150.886373][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3150.912972][T11170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3150.934033][T11250] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11193'. [ 3150.957569][T11250] tipc: Enabling of bearer rejected, media not registered [ 3150.993431][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11193'. [ 3151.047744][T11170] hsr_slave_0: entered promiscuous mode [ 3151.062647][T11170] hsr_slave_1: entered promiscuous mode [ 3151.635602][T11170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3151.654555][T11170] Cannot create hsr debugfs directory [ 3151.675237][T11257] bridge0: port 1(hsr_slave_1) entered blocking state [ 3151.682305][T11257] bridge0: port 1(hsr_slave_1) entered disabled state [ 3151.689378][T11257] hsr_slave_1: entered allmulticast mode [ 3151.696028][T11257] hsr_slave_1: left allmulticast mode [ 3152.602108][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11200'. [ 3152.621712][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11200'. [ 3152.712600][T11170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3152.734879][T11274] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11199'. [ 3152.878867][T11172] Bluetooth: hci3: command tx timeout [ 3153.512323][T11170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3153.567665][T11287] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3153.568144][T11170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3153.615204][T11170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3153.754634][T11170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3153.803562][T11170] 8021q: adding VLAN 0 to HW filter on device team0 [ 3153.830480][T16735] bridge0: port 1(bridge_slave_0) entered blocking state [ 3153.837718][T16735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3153.857085][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11205'. [ 3153.871052][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 3153.878216][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3153.911453][T11170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3153.922604][T11170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3153.946608][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11206'. [ 3154.160756][T11170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3154.161067][T11303] /dev/nullb0: Can't lookup blockdev [ 3154.956336][T18802] Bluetooth: hci3: command tx timeout [ 3155.385365][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11212'. [ 3155.438939][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11212'. [ 3155.472212][T11170] veth0_vlan: entered promiscuous mode [ 3155.518319][T11170] veth1_vlan: entered promiscuous mode [ 3155.585830][T11170] veth0_macvtap: entered promiscuous mode [ 3155.595741][T11170] veth1_macvtap: entered promiscuous mode [ 3155.622427][T11170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3155.648864][T11170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3155.674159][T11170] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3155.683114][T11170] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3155.708790][T11170] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3155.717541][T11170] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3155.738065][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11213'. [ 3155.803886][T11329] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11329 comm=syz.3.11213 [ 3155.896886][T18429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3156.078824][T18429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3156.148330][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3156.169533][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3156.204924][ T30] audit: type=1400 audit(2000003904.015:6429): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/root/syzkaller.xQMBMS/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 3156.245689][ T30] audit: type=1400 audit(2000003904.055:6430): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/root/syzkaller.xQMBMS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 3156.274596][ T30] audit: type=1400 audit(2000003904.055:6431): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/root/syzkaller.xQMBMS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=114629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 3157.010412][ T30] audit: type=1400 audit(2000003904.085:6432): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 3157.043813][T11338] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11214'. [ 3157.210175][ T30] audit: type=1400 audit(2000003904.245:6433): avc: denied { mounton } for pid=11170 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 3157.760494][T11358] net_ratelimit: 129 callbacks suppressed [ 3157.760516][T11358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3157.894017][T11358] netlink: 'syz.7.11222': attribute type 1 has an invalid length. [ 3158.743684][T11358] bond1 (unregistering): Released all slaves [ 3159.175403][T11384] overlayfs: failed to resolve './file0': -2 [ 3160.101226][T11391] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11229'. [ 3160.608628][T11405] xt_cluster: node mask cannot exceed total number of nodes [ 3162.148904][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3163.251225][T11433] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.11242'. [ 3163.279054][T11433] openvswitch: netlink: Flow key attr not present in new flow. [ 3163.470172][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11237'. [ 3163.504288][ T30] audit: type=1400 audit(2000003911.315:6434): avc: denied { append } for pid=11435 comm="syz.7.11237" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3163.680605][T11444] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11245'. [ 3163.826000][T11423] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11238'. [ 3163.950463][T11449] bridge0: port 1(hsr_slave_1) entered blocking state [ 3163.958904][T11449] bridge0: port 1(hsr_slave_1) entered disabled state [ 3163.974014][T11449] hsr_slave_1: entered allmulticast mode [ 3164.031717][T11449] hsr_slave_1: left allmulticast mode [ 3164.470824][T11423] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11238'. [ 3164.759182][T11460] xt_nfacct: accounting object `syz1' does not exists [ 3164.984064][T11466] bridge0: port 1(hsr_slave_1) entered blocking state [ 3164.991446][T11466] bridge0: port 1(hsr_slave_1) entered disabled state [ 3165.001762][T11466] hsr_slave_1: entered allmulticast mode [ 3165.045055][T11466] hsr_slave_1: left allmulticast mode [ 3165.686953][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3167.225432][T11484] »»»»»»7 speed is unknown, defaulting to 1000 [ 3167.290122][T11484] wg1 speed is unknown, defaulting to 1000 [ 3167.315045][T11493] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11257'. [ 3167.348609][T11493] tipc: Enabling of bearer rejected, media not registered [ 3167.353606][ T30] audit: type=1400 audit(2000003915.165:6435): avc: denied { getopt } for pid=11494 comm="syz.7.11258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3167.374354][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11257'. [ 3167.376856][T11495] Cannot find set identified by id 1 to match [ 3167.391954][T11484] »»»»»»7 speed is unknown, defaulting to 1000 [ 3167.630054][T11484] lo speed is unknown, defaulting to 1000 [ 3168.048590][T11507] bridge0: port 3(hsr_slave_1) entered blocking state [ 3168.055559][T11507] bridge0: port 3(hsr_slave_1) entered disabled state [ 3168.062919][T11507] hsr_slave_1: entered allmulticast mode [ 3168.203116][T11507] hsr_slave_1: left allmulticast mode [ 3169.353728][T11525] bridge0: port 1(hsr_slave_1) entered blocking state [ 3169.361208][T11525] bridge0: port 1(hsr_slave_1) entered disabled state [ 3169.372190][T11525] hsr_slave_1: entered allmulticast mode [ 3169.429575][T11525] hsr_slave_1: left allmulticast mode [ 3170.074952][T11530] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11269'. [ 3171.367583][ T30] audit: type=1400 audit(2000003919.165:6436): avc: denied { listen } for pid=11551 comm="syz.7.11272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3171.987325][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3173.108382][T11598] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11281'. [ 3173.168955][T11598] tipc: Enabling of bearer rejected, media not registered [ 3173.249413][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11281'. [ 3175.705361][T11609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11285'. [ 3176.670540][T11637] bridge0: port 1(hsr_slave_1) entered blocking state [ 3176.678895][T11637] bridge0: port 1(hsr_slave_1) entered disabled state [ 3176.689543][T11637] hsr_slave_1: entered allmulticast mode [ 3176.750019][T11637] hsr_slave_1: left allmulticast mode [ 3177.239372][T11632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11293'. [ 3177.282460][T11632] netlink: 43 bytes leftover after parsing attributes in process `syz.2.11293'. [ 3177.329341][T11632] netlink: 'syz.2.11293': attribute type 6 has an invalid length. [ 3177.337477][T11632] netlink: 'syz.2.11293': attribute type 5 has an invalid length. [ 3177.346420][T11632] netlink: 43 bytes leftover after parsing attributes in process `syz.2.11293'. [ 3177.429036][ T30] audit: type=1400 audit(2000003925.225:6437): avc: denied { getopt } for pid=11640 comm="syz.6.11295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3177.695504][T11647] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11297'. [ 3177.879966][T11651] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11295'. [ 3177.919588][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3178.145204][T11658] bridge0: port 3(hsr_slave_1) entered blocking state [ 3178.152661][T11658] bridge0: port 3(hsr_slave_1) entered disabled state [ 3178.169144][T11658] hsr_slave_1: entered allmulticast mode [ 3178.279566][T11658] hsr_slave_1: left allmulticast mode [ 3179.768847][T11666] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11302'. [ 3183.060879][T11692] bridge0: port 1(hsr_slave_1) entered blocking state [ 3183.068804][T11692] bridge0: port 1(hsr_slave_1) entered disabled state [ 3183.080944][T11692] hsr_slave_1: entered allmulticast mode [ 3183.153225][T11692] hsr_slave_1: left allmulticast mode [ 3183.761243][T11697] netlink: 88 bytes leftover after parsing attributes in process `syz.7.11310'. [ 3184.665409][T11721] bridge0: port 1(hsr_slave_1) entered blocking state [ 3184.672954][T11721] bridge0: port 1(hsr_slave_1) entered disabled state [ 3184.690114][T11721] hsr_slave_1: entered allmulticast mode [ 3184.751691][T11721] hsr_slave_1: left allmulticast mode [ 3185.579177][T11733] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11321'. [ 3186.732881][T11746] netlink: 88 bytes leftover after parsing attributes in process `syz.0.11323'. [ 3188.371748][ T30] audit: type=1326 audit(2000003936.185:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.7.11334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c26f8d169 code=0x0 [ 3190.423093][T11795] netlink: 'syz.2.11339': attribute type 4 has an invalid length. [ 3192.235364][ T30] audit: type=1400 audit(2000003939.725:6439): avc: denied { read } for pid=11814 comm="syz.7.11346" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 3192.307965][ T30] audit: type=1400 audit(2000003939.735:6440): avc: denied { open } for pid=11814 comm="syz.7.11346" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 3193.345274][ T30] audit: type=1400 audit(2000003941.155:6441): avc: denied { setopt } for pid=11838 comm="syz.7.11353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3193.373274][T11839] xt_cluster: node mask cannot exceed total number of nodes [ 3193.386736][ T30] audit: type=1400 audit(2000003941.155:6442): avc: denied { connect } for pid=11838 comm="syz.7.11353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3194.605609][ T30] audit: type=1326 audit(2000003942.415:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11863 comm="syz.6.11360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f394a78d169 code=0x0 [ 3196.133987][ T30] audit: type=1400 audit(2000003943.945:6444): avc: denied { read } for pid=11885 comm="syz.6.11368" path="socket:[116350]" dev="sockfs" ino=116350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3196.180422][T11893] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11370'. [ 3201.975136][T11943] bridge0: port 1(hsr_slave_1) entered blocking state [ 3201.983789][T11943] bridge0: port 1(hsr_slave_1) entered disabled state [ 3201.997148][T11943] hsr_slave_1: entered allmulticast mode [ 3202.056419][T11943] hsr_slave_1: left allmulticast mode [ 3202.580369][T11939] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11383'. [ 3202.850400][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11385'. [ 3202.864373][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11385'. [ 3203.093384][T11954] bridge0: port 3(hsr_slave_1) entered blocking state [ 3203.100541][T11954] bridge0: port 3(hsr_slave_1) entered disabled state [ 3203.110334][T11954] hsr_slave_1: entered allmulticast mode [ 3203.120381][T11954] hsr_slave_1: left allmulticast mode [ 3204.665138][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.741791][T11965] bridge0: port 1(hsr_slave_1) entered blocking state [ 3204.749337][T11965] bridge0: port 1(hsr_slave_1) entered disabled state [ 3204.760172][T11965] hsr_slave_1: entered allmulticast mode [ 3204.811539][T11965] hsr_slave_1: left allmulticast mode [ 3205.249784][T11964] xt_cluster: node mask cannot exceed total number of nodes [ 3205.471120][T11982] autofs: Bad value for 'fd' [ 3205.686769][T11991] netlink: 'syz.2.11398': attribute type 1 has an invalid length. [ 3205.715803][T11991] netlink: 208292 bytes leftover after parsing attributes in process `syz.2.11398'. [ 3205.765605][T11991] netlink: 'syz.2.11398': attribute type 2 has an invalid length. [ 3205.787440][T11991] netlink: 'syz.2.11398': attribute type 1 has an invalid length. [ 3206.451350][T12030] bridge0: port 1(hsr_slave_1) entered blocking state [ 3206.459096][T12030] bridge0: port 1(hsr_slave_1) entered disabled state [ 3206.472780][T12030] hsr_slave_1: entered allmulticast mode [ 3206.495679][T12030] hsr_slave_1: left allmulticast mode [ 3206.797820][T12031] »»»»»»7 speed is unknown, defaulting to 1000 [ 3206.862500][T12031] wg1 speed is unknown, defaulting to 1000 [ 3206.876563][T12031] »»»»»»7 speed is unknown, defaulting to 1000 [ 3207.100213][T12031] lo speed is unknown, defaulting to 1000 [ 3208.443508][T12050] 9pnet: p9_errstr2errno: server reported unknown error [ 3208.452052][T12047] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 3208.633322][T12056] autofs: Bad value for 'fd' [ 3209.348832][T12075] ipvlan2: entered promiscuous mode [ 3209.849465][T12092] x_tables: duplicate underflow at hook 1 [ 3209.864149][ T30] audit: type=1400 audit(2000003957.655:6445): avc: denied { read write } for pid=12091 comm="syz.7.11426" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 3210.444853][ T30] audit: type=1400 audit(2000003957.655:6446): avc: denied { open } for pid=12091 comm="syz.7.11426" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 3211.256032][T12105] Cannot find set identified by id 1 to match [ 3211.678015][T12115] autofs: Bad value for 'fd' [ 3212.371949][T12117] netlink: 'syz.6.11430': attribute type 4 has an invalid length. [ 3212.460825][T12123] Cannot find del_set index 1 as target [ 3212.475997][ T30] audit: type=1400 audit(2000004413.283:6447): avc: denied { append } for pid=12122 comm="syz.7.11434" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3212.902741][ T30] audit: type=1326 audit(2000004413.683:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3212.983642][ T30] audit: type=1326 audit(2000004413.683:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3213.009189][ T30] audit: type=1326 audit(2000004413.693:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3213.033249][ T30] audit: type=1326 audit(2000004413.693:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3213.108259][ T30] audit: type=1326 audit(2000004413.693:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3213.734620][ T30] audit: type=1326 audit(2000004413.693:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3214.880531][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3215.074112][ T30] audit: type=1326 audit(2000004415.883:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.106012][ T30] audit: type=1326 audit(2000004415.883:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.178527][ T30] audit: type=1326 audit(2000004415.953:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.504702][ T30] audit: type=1326 audit(2000004415.953:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.602317][ T30] audit: type=1326 audit(2000004415.953:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.628199][ T30] audit: type=1326 audit(2000004415.953:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.656123][ T30] audit: type=1326 audit(2000004415.953:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.684202][ T30] audit: type=1326 audit(2000004415.953:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.781997][ T30] audit: type=1326 audit(2000004415.953:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3215.892759][ T30] audit: type=1326 audit(2000004415.953:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12140 comm="syz.6.11440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394a78d169 code=0x7ffc0000 [ 3216.480814][T12177] /dev/nullb0: Can't lookup blockdev [ 3217.629897][T12195] tipc: Started in network mode [ 3217.634820][T12195] tipc: Node identity ac1414aa, cluster identity 4711 [ 3217.651376][T12195] tipc: Enabled bearer , priority 10 [ 3217.988490][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3218.772211][T28285] tipc: Node number set to 2886997162 [ 3218.883353][T12212] netlink: 'syz.2.11455': attribute type 4 has an invalid length. [ 3219.174433][T12219] bridge0: port 1(hsr_slave_1) entered blocking state [ 3219.182127][T12219] bridge0: port 1(hsr_slave_1) entered disabled state [ 3219.189536][T12219] hsr_slave_1: entered allmulticast mode [ 3219.199236][T12219] hsr_slave_1: left allmulticast mode [ 3219.552269][T12223] /dev/nullb0: Can't lookup blockdev [ 3222.534329][T12253] 9pnet_fd: p9_fd_create_unix (12253): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 3223.561469][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11471'. [ 3223.737033][T12266] xt_nfacct: accounting object `syz1' does not exists [ 3224.206129][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11474'. [ 3225.507511][T12301] bridge0: port 1(hsr_slave_1) entered blocking state [ 3225.515480][T12301] bridge0: port 1(hsr_slave_1) entered disabled state [ 3225.528294][T12301] hsr_slave_1: entered allmulticast mode [ 3225.590434][T12301] hsr_slave_1: left allmulticast mode [ 3226.164283][T12304] sctp: [Deprecated]: syz.2.11484 (pid 12304) Use of int in maxseg socket option. [ 3226.164283][T12304] Use struct sctp_assoc_value instead [ 3226.851952][T12322] autofs: Bad value for 'fd' [ 3227.725857][T12329] /dev/nullb0: Can't lookup blockdev [ 3230.818023][T12352] »»»»»»7 speed is unknown, defaulting to 1000 [ 3230.820882][T12352] wg1 speed is unknown, defaulting to 1000 [ 3230.826697][T12352] »»»»»»7 speed is unknown, defaulting to 1000 [ 3230.909079][T12352] lo speed is unknown, defaulting to 1000 [ 3231.106016][T12359] Cannot find set identified by id 1 to match [ 3232.195818][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 3232.195838][ T30] audit: type=1400 audit(2000004432.993:6480): avc: denied { create } for pid=12361 comm="syz.2.11503" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 3232.959418][T12396] autofs: Bad value for 'fd' [ 3233.281214][T12403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11520'. [ 3233.423425][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11520'. [ 3234.118465][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11525'. [ 3234.899572][T12452] autofs: Bad value for 'fd' [ 3236.594919][T12468] 9pnet_fd: Insufficient options for proto=fd [ 3237.046055][T12458] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11534'. [ 3238.217487][T12484] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.11542'. [ 3238.898473][T12486] netlink: 'syz.6.11541': attribute type 4 has an invalid length. [ 3240.072897][T12503] autofs: Bad value for 'fd' [ 3240.728134][T12513] netlink: 'syz.2.11549': attribute type 4 has an invalid length. [ 3240.949729][T12525] netlink: 'syz.6.11556': attribute type 3 has an invalid length. [ 3242.153931][T12532] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11559'. [ 3244.004306][T12566] netlink: 'syz.7.11570': attribute type 4 has an invalid length. [ 3245.180323][ T30] audit: type=1326 audit(2000004445.993:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12583 comm="syz.3.11578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0642f8d169 code=0x0 [ 3245.298980][T12592] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 3245.310071][ T30] audit: type=1400 audit(2000004446.123:6482): avc: denied { relabelto } for pid=12591 comm="syz.7.11580" name="63" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 3245.338930][ T30] audit: type=1400 audit(2000004446.143:6483): avc: denied { associate } for pid=12591 comm="syz.7.11580" name="63" dev="tmpfs" ino=345 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 3245.417122][ T30] audit: type=1400 audit(2000004446.223:6484): avc: denied { write } for pid=11170 comm="syz-executor" name="63" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 3245.460468][ T30] audit: type=1400 audit(2000004446.233:6485): avc: denied { remove_name } for pid=11170 comm="syz-executor" name="binderfs" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 3245.521127][ T30] audit: type=1400 audit(2000004446.233:6486): avc: denied { rmdir } for pid=11170 comm="syz-executor" name="63" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 3247.449495][T12620] bridge0: port 3(hsr_slave_1) entered blocking state [ 3247.507677][T12620] bridge0: port 3(hsr_slave_1) entered disabled state [ 3247.589625][T12620] hsr_slave_1: entered allmulticast mode [ 3247.609968][T12620] hsr_slave_1: left allmulticast mode [ 3247.740393][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3248.675118][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11593'. [ 3248.938695][T12645] bridge0: port 1(hsr_slave_1) entered blocking state [ 3248.946411][T12645] bridge0: port 1(hsr_slave_1) entered disabled state [ 3248.961869][T12645] hsr_slave_1: entered allmulticast mode [ 3249.031983][T12645] hsr_slave_1: left allmulticast mode [ 3250.047502][T12644] netlink: 'syz.0.11595': attribute type 4 has an invalid length. [ 3250.072152][T12656] /dev/nullb0: Can't lookup blockdev [ 3250.649803][T12661] netlink: 'syz.2.11598': attribute type 1 has an invalid length. [ 3250.682942][T12653] tipc: Enabling of bearer rejected, already enabled [ 3250.761330][T12670] vlan0: entered promiscuous mode [ 3251.858086][T12684] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 3251.866690][T12680] netlink: 'syz.2.11606': attribute type 4 has an invalid length. [ 3251.867305][T12684] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 3251.963002][T12686] /dev/nullb0: Can't lookup blockdev [ 3253.944067][T12709] libceph: resolve '0.0' (ret=-3): failed [ 3254.045491][T12715] bridge0: port 1(hsr_slave_1) entered blocking state [ 3254.065840][T12715] bridge0: port 1(hsr_slave_1) entered disabled state [ 3254.073398][T12715] hsr_slave_1: entered allmulticast mode [ 3254.093117][T12715] hsr_slave_1: left allmulticast mode [ 3254.112812][T12719] netlink: 'syz.3.11617': attribute type 4 has an invalid length. [ 3254.436255][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3255.955852][ T30] audit: type=1400 audit(2000004456.763:6487): avc: denied { read } for pid=12744 comm="syz.7.11625" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3256.049301][ T30] audit: type=1400 audit(2000004456.763:6488): avc: denied { open } for pid=12744 comm="syz.7.11625" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3256.212749][ T30] audit: type=1400 audit(2000004456.793:6489): avc: denied { ioctl } for pid=12744 comm="syz.7.11625" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3256.365377][T12755] netlink: 'syz.3.11628': attribute type 4 has an invalid length. [ 3256.375749][T12756] FAULT_INJECTION: forcing a failure. [ 3256.375749][T12756] name failslab, interval 1, probability 0, space 0, times 1 [ 3256.418160][T12756] CPU: 1 UID: 0 PID: 12756 Comm: syz.7.11627 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 3256.418195][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 3256.418208][T12756] Call Trace: [ 3256.418215][T12756] [ 3256.418223][T12756] dump_stack_lvl+0x16c/0x1f0 [ 3256.418259][T12756] should_fail_ex+0x50a/0x650 [ 3256.418291][T12756] ? fs_reclaim_acquire+0xae/0x150 [ 3256.418322][T12756] ? tomoyo_realpath_from_path+0xb9/0x720 [ 3256.418352][T12756] should_failslab+0xc2/0x120 [ 3256.418377][T12756] __kmalloc_noprof+0xcb/0x510 [ 3256.418397][T12756] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 3256.418432][T12756] tomoyo_realpath_from_path+0xb9/0x720 [ 3256.418461][T12756] ? tomoyo_path_number_perm+0x235/0x590 [ 3256.418496][T12756] ? tomoyo_path_number_perm+0x235/0x590 [ 3256.418526][T12756] tomoyo_path_number_perm+0x248/0x590 [ 3256.418551][T12756] ? tomoyo_path_number_perm+0x235/0x590 [ 3256.418580][T12756] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3256.418635][T12756] ? __pfx_lock_release+0x10/0x10 [ 3256.418659][T12756] ? trace_lock_acquire+0x14e/0x1f0 [ 3256.418683][T12756] ? lock_acquire+0x2f/0xb0 [ 3256.418707][T12756] ? __fget_files+0x40/0x3a0 [ 3256.418730][T12756] ? __fget_files+0x206/0x3a0 [ 3256.418751][T12756] ? 0xffffffff81000000 [ 3256.418767][T12756] ? 0xffffffff81000000 [ 3256.418779][T12756] security_file_ioctl+0x9b/0x240 [ 3256.418808][T12756] __x64_sys_ioctl+0xb7/0x200 [ 3256.418838][T12756] do_syscall_64+0xcd/0x250 [ 3256.418866][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3256.418894][T12756] RIP: 0033:0x7f2c26f8d169 [ 3256.418909][T12756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3256.418929][T12756] RSP: 002b:00007f2c27d6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3256.418950][T12756] RAX: ffffffffffffffda RBX: 00007f2c271a5fa0 RCX: 00007f2c26f8d169 [ 3256.418964][T12756] RDX: ffffffff81000000 RSI: 0000000080089203 RDI: 0000000000000003 [ 3256.418977][T12756] RBP: 00007f2c27d6c090 R08: 0000000000000000 R09: 0000000000000000 [ 3256.418989][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3256.419001][T12756] R13: 0000000000000000 R14: 00007f2c271a5fa0 R15: 00007ffe8e0f0d78 [ 3256.419023][T12756] ? 0xffffffff81000000 [ 3256.419043][T12756] [ 3256.767322][T12756] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3258.517127][T12788] ipvlan4: entered promiscuous mode [ 3258.779146][T12799] netlink: 'syz.3.11643': attribute type 3 has an invalid length. [ 3259.488396][T12800] netlink: 'syz.6.11642': attribute type 4 has an invalid length. [ 3259.960321][T12814] autofs: Bad value for 'fd' [ 3260.069261][T12816] bridge0: port 1(hsr_slave_1) entered blocking state [ 3260.077554][T12816] bridge0: port 1(hsr_slave_1) entered disabled state [ 3260.087871][T12816] hsr_slave_1: entered allmulticast mode [ 3260.110797][T12816] hsr_slave_1: left allmulticast mode [ 3260.705391][T12818] netlink: 'syz.6.11650': attribute type 4 has an invalid length. [ 3260.775341][T12820] xt_cluster: node mask cannot exceed total number of nodes [ 3261.669791][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11653'. [ 3264.342591][T12865] netlink: 'syz.3.11662': attribute type 4 has an invalid length. [ 3264.357967][T12868] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11664'. [ 3264.404626][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11661'. [ 3264.438805][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11661'. [ 3264.440671][T12873] xt_cluster: node mask cannot exceed total number of nodes [ 3265.967741][T12889] netlink: 'syz.3.11670': attribute type 3 has an invalid length. [ 3265.976336][T12889] netlink: 'syz.3.11670': attribute type 1 has an invalid length. [ 3266.080462][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.383987][T12903] netlink: 'syz.3.11676': attribute type 4 has an invalid length. [ 3267.896449][T18802] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 3267.925132][T12924] openvswitch: netlink: Actions may not be safe on all matching packets [ 3267.948405][T12921] xt_cluster: node mask cannot exceed total number of nodes [ 3269.380756][T12939] netlink: 'syz.2.11684': attribute type 4 has an invalid length. [ 3271.065878][T12960] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11689'. [ 3271.533485][T12971] netlink: 248 bytes leftover after parsing attributes in process `syz.3.11692'. [ 3271.824431][T12971] 9pnet_fd: Insufficient options for proto=fd [ 3272.650843][T12984] bridge0: port 1(hsr_slave_1) entered blocking state [ 3272.657841][T12984] bridge0: port 1(hsr_slave_1) entered disabled state [ 3272.667333][T12984] hsr_slave_1: entered allmulticast mode [ 3272.685164][T12984] hsr_slave_1: left allmulticast mode [ 3273.353546][T18802] Bluetooth: hci3: command 0x0406 tx timeout [ 3273.805200][T12994] tipc: Enabled bearer , priority 10 [ 3275.282114][T13017] bridge0: port 3(hsr_slave_1) entered blocking state [ 3275.289973][T13017] bridge0: port 3(hsr_slave_1) entered disabled state [ 3275.302769][T13017] hsr_slave_1: entered allmulticast mode [ 3275.384413][T13017] hsr_slave_1: left allmulticast mode [ 3275.837162][T13015] bridge0: port 1(hsr_slave_1) entered blocking state [ 3275.973010][ T30] audit: type=1400 audit(2000004476.773:6490): avc: denied { append } for pid=13021 comm="syz.7.11707" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 3276.012249][T13015] bridge0: port 1(hsr_slave_1) entered disabled state [ 3276.028972][T13015] hsr_slave_1: entered allmulticast mode [ 3276.089023][ T30] audit: type=1400 audit(2000004476.783:6491): avc: denied { open } for pid=13021 comm="syz.7.11707" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 3276.156236][T13015] hsr_slave_1: left allmulticast mode [ 3276.227902][T11172] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 3276.310093][ T31] INFO: task syz.1.11092:10920 blocked for more than 143 seconds. [ 3276.317954][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 3276.347896][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3276.357066][ T31] task:syz.1.11092 state:D stack:28464 pid:10920 tgid:10918 ppid:5819 task_flags:0x400640 flags:0x00000006 [ 3276.371764][ T31] Call Trace: [ 3276.375324][ T31] [ 3276.378498][ T31] __schedule+0xf43/0x5890 [ 3276.384191][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 3276.402401][ T31] ? __pfx___schedule+0x10/0x10 [ 3276.415076][ T31] ? schedule+0x298/0x350 [ 3276.434522][ T31] ? __pfx_lock_release+0x10/0x10 [ 3276.482697][ T31] ? lock_acquire+0x2f/0xb0 [ 3276.490577][ T31] ? schedule+0x1fd/0x350 [ 3276.499464][ T31] schedule+0xe7/0x350 [ 3276.506961][ T31] schedule_timeout+0x244/0x280 [ 3276.515342][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3276.524686][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3276.540625][ T31] __wait_for_common+0x3e1/0x600 [ 3276.546963][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3276.555890][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 3276.566112][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 3276.679628][ T31] wait_for_completion_state+0x1c/0x40 [ 3277.390419][ T31] do_coredump+0x86f/0x4410 [ 3277.402352][ T31] ? unwind_get_return_address+0x59/0xa0 [ 3277.431648][ T31] ? __pfx_do_coredump+0x10/0x10 [ 3277.513195][ T31] ? stack_trace_save+0x95/0xd0 [ 3277.527876][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3277.541163][ T31] ? hlock_class+0x4e/0x130 [ 3277.555446][ T31] ? stack_depot_save_flags+0x28/0x9c0 [ 3277.567048][ T31] ? kasan_save_stack+0x42/0x60 [ 3277.578616][ T31] ? kasan_save_stack+0x33/0x60 [ 3277.589870][ T31] ? kasan_save_track+0x14/0x30 [ 3277.600905][ T31] ? kasan_save_free_info+0x3b/0x60 [ 3277.610968][ T31] ? __kasan_slab_free+0x51/0x70 [ 3277.624537][ T31] ? kmem_cache_free+0x2e2/0x4d0 [ 3277.633930][ T31] ? __sigqueue_free+0xba/0x2a0 [ 3277.638951][ T31] ? get_signal+0xcbc/0x26c0 [ 3277.643632][ T31] ? arch_do_signal_or_restart+0x90/0x7e0 [ 3277.649499][ T31] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 3277.655442][ T31] ? find_held_lock+0x2d/0x110 [ 3277.665825][ T31] ? proc_coredump_connector+0x2d2/0x4f0 [ 3277.678425][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 3277.712855][ T31] get_signal+0x230b/0x26c0 [ 3277.717555][ T31] ? __pfx_get_signal+0x10/0x10 [ 3277.731285][ T31] ? rcu_is_watching+0x12/0xc0 [ 3277.736171][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 3277.741663][ T31] arch_do_signal_or_restart+0x90/0x7e0 [ 3277.747299][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3277.753756][ T31] ? rcu_is_watching+0x12/0xc0 [ 3277.758747][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 3277.766665][ T31] do_syscall_64+0xda/0x250 [ 3277.780038][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3277.795867][ T31] RIP: 0033:0x7fcb7da4e750 [ 3277.828790][ T31] RSP: 002b:00007fcb7ea8d338 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3277.837353][ T31] RAX: 0000000000000000 RBX: 00007fcb7dda5fa0 RCX: 00007fcb7db8d169 [ 3277.868814][ T31] RDX: 00007fcb7ea8d340 RSI: 00007fcb7ea8d470 RDI: 000000000000000b [ 3277.876951][ T31] RBP: 00007fcb7dc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 3277.898689][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3277.906725][ T31] R13: 0000000000000000 R14: 00007fcb7dda5fa0 R15: 00007ffd12bee6c8 [ 3277.934612][ T31] [ 3277.937770][ T31] [ 3277.937770][ T31] Showing all locks held in the system: [ 3277.955531][ T31] 1 lock held by khungtaskd/31: [ 3277.965062][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 3277.993205][ T31] 2 locks held by getty/5574: [ 3277.997900][ T31] #0: ffff8880325ff0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 3278.007992][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 3278.018436][ T31] [ 3278.021146][ T31] ============================================= [ 3278.021146][ T31] [ 3278.030223][ T31] NMI backtrace for cpu 1 [ 3278.030234][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 3278.030254][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 3278.030265][ T31] Call Trace: [ 3278.030271][ T31] [ 3278.030277][ T31] dump_stack_lvl+0x116/0x1f0 [ 3278.030308][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 3278.030328][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3278.030353][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 3278.030380][ T31] watchdog+0xf62/0x12b0 [ 3278.030412][ T31] ? __pfx_watchdog+0x10/0x10 [ 3278.030436][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3278.030459][ T31] ? __kthread_parkme+0x148/0x220 [ 3278.030477][ T31] ? __pfx_watchdog+0x10/0x10 [ 3278.030503][ T31] kthread+0x3af/0x750 [ 3278.030524][ T31] ? __pfx_kthread+0x10/0x10 [ 3278.030550][ T31] ? __pfx_kthread+0x10/0x10 [ 3278.030571][ T31] ret_from_fork+0x45/0x80 [ 3278.030593][ T31] ? __pfx_kthread+0x10/0x10 [ 3278.030614][ T31] ret_from_fork_asm+0x1a/0x30 [ 3278.030644][ T31] [ 3278.030650][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3278.143544][ C0] NMI backtrace for cpu 0 [ 3278.143557][ C0] CPU: 0 UID: 0 PID: 5805 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 3278.143575][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 3278.143584][ C0] RIP: 0010:__x64_sys_clock_nanosleep+0x34a/0x4a0 [ 3278.143607][ C0] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 01 00 00 48 8b 45 30 4c 89 f2 44 89 ee 8b 7c 24 04 ff d0 0f 1f 00 48 63 e8 07 48 c7 c5 ea ff ff ff e8 78 45 10 00 48 b8 00 00 00 00 00 fc [ 3278.143627][ C0] RSP: 0018:ffffc90003787e78 EFLAGS: 00000282 [ 3278.143641][ C0] RAX: 0000000000000000 RBX: 1ffff920006f0fd2 RCX: 1ffffffff20c4511 [ 3278.143651][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cfc80 RDI: ffffffff8bd36a20 [ 3278.143661][ C0] RBP: 0000000000000000 R08: fffff520006f0f8e R09: 0000000000000001 [ 3278.143671][ C0] R10: ffffffff90626c17 R11: 0000000000000000 R12: ffff8880123ec880 [ 3278.143681][ C0] R13: 0000000000000000 R14: ffffc90003787eb0 R15: ffffffff8b700a50 [ 3278.143691][ C0] FS: 000055557fe85500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 3278.143707][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3278.143717][ C0] CR2: 00007f064317b338 CR3: 00000000298e6000 CR4: 00000000003526f0 [ 3278.143727][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3278.143736][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3278.143745][ C0] Call Trace: [ 3278.143751][ C0] [ 3278.143757][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 3278.143777][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 3278.143796][ C0] ? nmi_handle+0x1ac/0x5d0 [ 3278.143817][ C0] ? __x64_sys_clock_nanosleep+0x34a/0x4a0 [ 3278.143833][ C0] ? default_do_nmi+0x6a/0x160 [ 3278.143850][ C0] ? exc_nmi+0x170/0x1e0 [ 3278.143865][ C0] ? end_repeat_nmi+0xf/0x53 [ 3278.143892][ C0] ? __x64_sys_clock_nanosleep+0x34a/0x4a0 [ 3278.143908][ C0] ? __x64_sys_clock_nanosleep+0x34a/0x4a0 [ 3278.143924][ C0] ? __x64_sys_clock_nanosleep+0x34a/0x4a0 [ 3278.143940][ C0] [ 3278.143945][ C0] [ 3278.143952][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 3278.143971][ C0] do_syscall_64+0xcd/0x250 [ 3278.143993][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3278.144013][ C0] RIP: 0033:0x7f53f1bbf9e3 [ 3278.144026][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e db 1b 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 3278.144039][ C0] RSP: 002b:00007fff41041e18 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 3278.144054][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f53f1bbf9e3 [ 3278.144064][ C0] RDX: 00007fff41041e30 RSI: 0000000000000000 RDI: 0000000000000000 [ 3278.144073][ C0] RBP: 0000000000000000 R08: 000000000009e412 R09: 00007f53f298b000 [ 3278.144083][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff41042280 [ 3278.144093][ C0] R13: 0000000000000004 R14: 00007fff41041e6c R15: 00007fff41041f00 [ 3278.144109][ C0] [ 3278.144720][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3278.144733][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 3278.144753][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 3278.144764][ T31] Call Trace: [ 3278.144770][ T31] [ 3278.144778][ T31] dump_stack_lvl+0x3d/0x1f0 [ 3278.144805][ T31] panic+0x71d/0x800 [ 3278.144825][ T31] ? __pfx_panic+0x10/0x10 [ 3278.144845][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 3278.144873][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3278.144896][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 3278.144920][ T31] ? watchdog+0xdcc/0x12b0 [ 3278.144946][ T31] ? watchdog+0xdbf/0x12b0 [ 3278.144975][ T31] watchdog+0xddd/0x12b0 [ 3278.145005][ T31] ? __pfx_watchdog+0x10/0x10 [ 3278.145029][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3278.145054][ T31] ? __kthread_parkme+0x148/0x220 [ 3278.145074][ T31] ? __pfx_watchdog+0x10/0x10 [ 3278.145101][ T31] kthread+0x3af/0x750 [ 3278.145123][ T31] ? __pfx_kthread+0x10/0x10 [ 3278.145149][ T31] ? __pfx_kthread+0x10/0x10 [ 3278.145171][ T31] ret_from_fork+0x45/0x80 [ 3278.145194][ T31] ? __pfx_kthread+0x10/0x10 [ 3278.145215][ T31] ret_from_fork_asm+0x1a/0x30 [ 3278.145246][ T31] [ 3278.560988][ T31] Kernel Offset: disabled [ 3278.565299][ T31] Rebooting in 86400 seconds..